Principal Infrastructure Security Engineer

🔥 19 hours ago

🇺🇸 United States – Remote

💵 $220k - $240k / year

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.Why this score:

• Open for 1 day.
• Jobs at this company usually fill in 42 days.

Apply Now

Find Similar Remote Jobs

Zeta Global

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2007

💼 Consulting

📦 Logistics

✈️ Travel

💰 Post-IPO Debt on 2024-09

Consulting • Logistics • Travel

Zeta Global is an AI-powered marketing cloud that leverages proprietary AI and trillions of consumer signals to acquire, grow, and retain customers more efficiently. The Zeta Marketing Platform (ZMP) offers a comprehensive suite of tools, including data management, customer data platforms (CDP), email service providers (ESP), and digital signal processing (DSP), to create individualized customer experiences and improve marketing outcomes. Zeta emphasizes omnichannel marketing, customer intelligence, and data-driven marketing strategies, partnering with brands, agencies, and publishers worldwide to accelerate brand growth and engagement. Their platform is designed to tackle complex marketing challenges with solutions for customer acquisition, growth, and retention through predictive AI and actionable consumer data.

📋 Description

• Define and execute a risk-based DevSecOps roadmap • Establish ownership, metrics, escalation paths, and a plan to grow the team • Implement preventive AWS controls for identity, networking, encryption, secrets/key management, and cloud configuration • Ensure security-relevant activity is logged for monitoring, investigation, and audit • Embed security into IaC, CI/CD, containers/orchestration, and software supply chains • Implement automated pipeline controls including SAST, IaC/container scanning, and policy-as-code • Partner with AppSec and InfoSec on security testing, policy, risk, audit evidence, and incident response • Triage and prioritize vulnerabilities by exposure, exploitability, and business impact • Coordinate remediation and track exceptions • Support investigation, containment, recovery, and post-incident improvement

🎯 Requirements

• 10+ years combined experience in software, platform/DevOps, and security engineering; 3+ years as a technical lead • Experience leading cross-functional security or infrastructure initiatives and influencing engineering, DevOps/platform, AppSec, and InfoSec teams • Hands-on AWS security and IAM (least privilege, service identities, privileged access, encryption, networking/security boundaries) • Experience automating controls with scripting, IaC, CI/CD, and policy-as-code • Experience securing delivery pipelines end to end (IaC, CI/CD, containers, dependencies/artifacts, secrets) • Experience prioritizing vulnerabilities by risk and establishing ownership, escalation, exception, and remediation workflows • Experience in security incident investigation, containment, recovery, and post-incident improvement • Ability to communicate risk and tradeoffs to leadership • Preferred: Experience building a security/DevSecOps practice and hiring, developing, or managing engineers • Preferred: Kubernetes/container security; software supply chain and secure SDLC practices; security observability/detection partnership with InfoSec/SOC • Preferred: Experience selecting security tools, managing vendors and budgets, and measuring control coverage, risk reduction, and remediation progress • Preferred: Familiarity with SOX, SOC 2, or ISO 27001

🏖️ Benefits

• Unlimited PTO • Excellent medical, dental, and vision coverage • Employee Equity • Employee Discounts • Virtual Wellness Classes • Pet Insurance

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume