FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Principal Infrastructure Security Engineer
Zeta Global. Define and execute a risk-based DevSecOps roadmap, including ownership, metrics, escalation paths, and team growth planning .
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates extensive experience in defining and executing risk-based DevSecOps roadmaps, implementing AWS security controls, and automating security processes within CI/CD pipelines. Proven ability to lead cross-functional teams in security initiatives and communicate risk effectively to leadership.
Highest-signal resume keywords
10+ Years Experience In Software, Platform/DevOps, And Security EngineeringHands-On AWS Security And IAMExperience Automating Controls With Scripting, IaC, CI/CD, And Policy-As-CodeExperience Securing Delivery Pipelines End To EndExperience In Security Incident Investigation And Remediation
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
DevSecOps Roadmap ExecutionAWS Security ControlsIdentity And Access Management (IAM)Infrastructure As Code (IaC)Continuous Integration/Continuous Deployment (CI/CD)Vulnerability PrioritizationSecurity Incident InvestigationAutomated Pipeline ControlsPolicy-As-CodeContainer Security
Soft Skills
LeadershipCommunicationCollaborationInfluencing
Tools & Technologies
KubernetesSASTSecrets ManagementCloud ConfigurationSecurity Monitoring Tools
Certifications & Qualifications
SOXSOC 2ISO 27001
Industry Keywords
Security PracticesSoftware Supply ChainSecure SDLCSecurity ObservabilityRegulated Audit Controls
Tech Stack
Tools & technologiesAWSCloudKubernetesSDLC
About the role
Key responsibilities & impact- Define and execute a risk-based DevSecOps roadmap, including ownership, metrics, escalation paths, and team growth planning
- Implement preventive AWS controls for identity, networking, encryption, secrets/key management, and cloud configuration
- Ensure security-relevant activity is logged for monitoring, investigation, and audit
- Embed security into IaC, CI/CD, containers/orchestration, and software supply chains
- Implement automated pipeline controls including SAST, IaC/container scanning, and policy-as-code
- Partner with AppSec and InfoSec on security testing, policy, risk, audit evidence, and incident response
- Triage and prioritize vulnerabilities by exposure, exploitability, and business impact
- Coordinate remediation, track exceptions, and support investigation, containment, recovery, and post-incident improvement
Requirements
What you’ll need- 10+ years combined experience in software, platform/DevOps, and security engineering; 3+ years as a technical lead
- Experience leading cross-functional security or infrastructure initiatives and influencing engineering, DevOps/platform, AppSec, and InfoSec teams
- Hands-on AWS security and IAM, including least privilege, service identities, privileged access, encryption, networking/security boundaries
- Experience automating controls with scripting, IaC, CI/CD, and policy-as-code
- Experience securing delivery pipelines end to end, including IaC, CI/CD, containers, dependencies/artifacts, and secrets
- Experience prioritizing vulnerabilities by risk and establishing ownership, escalation, exception, and remediation workflows
- Experience in security incident investigation, containment, recovery, and post-incident improvement
- Ability to communicate risk and tradeoffs to leadership
- Preferred: experience building a security/DevSecOps practice and hiring, developing, or managing engineers
- Preferred: Kubernetes/container security, software supply chain and secure SDLC practices, and security observability/detection partnership with InfoSec/SOC
- Preferred: experience selecting security tools, managing vendors and budgets, and measuring control coverage, risk reduction, and remediation progress
- Preferred: familiarity with public-company or regulated audit controls such as SOX, SOC 2, or ISO 27001
Benefits
Comp & perks- Unlimited PTO
- Excellent medical, dental, and vision coverage
- Employee Equity
- Employee Discounts
- Virtual Wellness Classes
- Pet Insurance