> Markdown version of [/jobs/ext/2693489-chief-information-security-officer](https://www.wearedevelopers.com/jobs/ext/2693489-chief-information-security-officer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Chief Information Security Officer

- **Company:** Zipline
- **Location:** South San Francisco, CA, United States
- **Experience:** Expert
- **Salary:** $250,000.0 - $350,000.0
- **Contract:** Permanent contract
- **Skills:** Cloud Computing, Cyber Security, Embedded Software, Operational Data Store, Cloud Services, Cyber-physical Systems, Software Engineering, Software Vulnerability Management, Software Security
- **Published:** September 3, 2026
- **Apply:** https://www.techcareers.com/job.asp?id=3375686037&tx=KR2121FFG&pt=1&aff=0B19D771-A501-4A5E-8338-2A822B784D54&utm_source=Job%20Feed&utm_medium=textkernel&utm_campaign=DE&utm_term=0B19D771-A501-4A5E-8338-2A822B784D54

## About the Role

* Experience as a CISO, VP of Security, or equivalent leader accountable for both security strategy and hands-on execution.
 * Leadership experience in information security, product security, or security engineering within a highly technical organization operating at scale.
 * A software engineering foundation, including experience building production software, security systems, or technical controls.
 * Technical depth across application, infrastructure, cloud, identity, data, and software security.
 * Experience securing safety-critical or cyber-physical systems, such as embedded, robotics, aerospace, automotive, or industrial technology.
 * Experience leading serious security incident response and assessing threats from sophisticated external attackers.
 * Judgment balancing security, privacy, legal obligations, safety, engineering velocity, customer needs, and business objectives while working directly in a lean team.

## Description

Zipline operates autonomous delivery systems spanning cloud services, customer and operational data, embedded software, aircraft, and field infrastructure. Security must protect those systems, customers, partners, and the people who rely on them while enabling engineering teams to deliver safely and quickly.

As Chief Information Security Officer, you will own company-wide security and privacy strategy and lead a lean, technical organization across product and corporate security. You will first focus the company on its most consequential risks and remediation decisions, then build the engineering capabilities, controls, and operating model that scale with Zipline. You can define and communicate a clear company-wide security strategy, align leaders around it, and remain hands-on in solving the most important problems.

What You'll Do

 * Set security and privacy strategy, risk posture, roadmap, operating model, and investment priorities across product, infrastructure, data, corporate technology, and physical systems.
 * Identify and sequence the company's highest-consequence risks, driving clear remediation decisions with Engineering, IT, Legal, Safety, Operations, and Physical Security.
 * Advise executives and the board on material security and privacy risks, translating technical findings into business tradeoffs and investment decisions.
 * Lead a software security engineering team that contributes production fixes, reusable platforms, and controls that eliminate systemic vulnerability classes.
 * Establish security architecture and practices for identity, access control, secrets, data protection, applications, cloud infrastructure, embedded software, aircraft, and field infrastructure.
 * Lead threat modeling, testing, vulnerability management, incident response, and security reviews; measure risk coverage, remediation, readiness, control effectiveness, and secure-engineering adoption.


## Related Videos

- [Leverage Cloud Computing Benefits with Serverless Multi-Cloud ML ](https://www.wearedevelopers.com/videos/78-leverage-cloud-computing-benefits-with-serverless-multi-cloud-ml)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Green Cloud Computing](https://www.wearedevelopers.com/videos/592-green-cloud-computing)
- [Cloud-nativeApplications- What’s the buzz about](https://www.wearedevelopers.com/videos/55-cloud-nativeapplications-what-s-the-buzz-about)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)
- [Security Basics for Vibe Coders](https://www.wearedevelopers.com/magazine/598-security-basics-for-vibe-coders)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)