10+ years in software, DevOps, and security engineering; 3+ years as a technical lead.
Proven experience leading cross-functional security initiatives and influencing teams.
Hands-on expertise in AWS security, IAM, and automating controls with scripting and IaC.
Experience securing end-to-end delivery pipelines including IaC and CI/CD.
Ability to prioritize vulnerabilities by risk and manage remediation workflows.
Skilled in security incident investigation and communicating risks to leadership.
Responsibilities
Define and execute a risk-based DevSecOps roadmap with clear ownership and metrics.
Implement AWS security controls for identity, networking, and encryption.
Embed security practices into IaC, CI/CD, and software supply chains.
Collaborate with AppSec and InfoSec on security testing and incident response.
Triage vulnerabilities based on exposure and business impact, coordinating remediation efforts.
Benefits
Unlimited PTO
Excellent medical, dental, and vision coverage
Employee Equity
Employee Discounts, Virtual Wellness Classes, and Pet Insurance
Full Job Description
Role Overview
This is a hands-on Principal Infrastructure Security opportunity within the DevSecOps practice that strengthens security across our primarily AWS-based infrastructure and software delivery. Partner with AppSec and InfoSec to prevent issues and respond effectively when they arise. This is a player-coach role: set strategy while staying close to the technical work.
What You'll Do
Define and execute a risk-based DevSecOps roadmap; establish ownership, metrics, escalation paths, and a plan to grow the team.
Implement preventive AWS controls for identity, networking, encryption, secrets/key management, and cloud configuration; ensure security-relevant activity is logged for monitoring, investigation, and audit.
Embed security into IaC, CI/CD, containers/orchestration, and software supply chains (SCA, secrets scanning, artifact integrity/signing, SBOMs where appropriate), including automated pipeline controls (SAST, IaC/container scanning, policy-as-code).
Partner with AppSec and InfoSec on security testing, policy, risk, audit evidence, and incident response.
Triage and prioritize vulnerabilities by exposure, exploitability, and business impact; coordinate remediation, track exceptions, and support investigation, containment, recovery, and post-incident improvement.
What We're Looking For
Required qualifications
10+ years combined experience in software, platform/DevOps, and security engineering; 3+ years as a technical lead.
Experience leading cross-functional security or infrastructure initiatives and influencing engineering, DevOps/platform, AppSec, and InfoSec teams.
Hands-on AWS security and IAM (least privilege, service identities, privileged access, encryption, networking/security boundaries); experience automating controls with scripting, IaC, CI/CD, and policy-as-code.
Experience securing delivery pipelines end to end (IaC, CI/CD, containers, dependencies/artifacts, secrets).
Experience prioritizing vulnerabilities by risk and establishing ownership, escalation, exception, and remediation workflows.
Experience in security incident investigation, containment, recovery, and post-incident improvement; ability to communicate risk and tradeoffs to leadership.
Preferred qualifications
Experience building a security/DevSecOps practice and hiring, developing, or managing engineers.
Kubernetes/container security; software supply chain and secure SDLC practices; security observability/detection partnership with InfoSec/SOC.
Experience selecting security tools, managing vendors and budgets, and measuring control coverage, risk reduction, and remediation progress.
Familiarity with public-company or regulated audit controls (e.g., SOX, SOC 2, ISO 27001).
BENEFITS & PERKS
Unlimited PTO
Excellent medical, dental, and vision coverage
Employee Equity
Employee Discounts, Virtual Wellness Classes, and Pet Insurance and more!!
SALARY RANGE
The salary range for this role is $220,000 - $240,000, depending on location and experience.
#LI-TS1
About Zeta Global
Zeta Global is a data-driven marketing technology company that combines the power of artificial intelligence with the scale of data, applying insights from over 2.4 billion user profiles to generate business outcomes. Zeta Global?s products and services include programmatic media buying, email marketing, CRM, data and analytics, and marketing automation. The company serves a wide range of industries, including financial services, insurance, automotive, telecommunications, retail, publishing, and travel. Zeta Global has offices in North America, Europe, and Asia-Pacific.
