> Markdown version of [/jobs/ext/3844383-head-of-information-security](https://www.wearedevelopers.com/jobs/ext/3844383-head-of-information-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Head of Information Security

- **Company:** Zipline
- **Location:** South San Francisco, CA, United States
- **Experience:** Expert
- **Salary:** $250,000.0 - $350,000.0
- **Contract:** Permanent contract
- **Skills:** Cloud Computing, Cyber Security, Embedded Software, Hardware Security Module, Operational Data Store, Cloud Services, Cyber-physical Systems, Software Engineering, Software Vulnerability Management, Software Security, Build Tools
- **Published:** October 20, 2026
- **Apply:** https://www.techcareers.com/job.asp?id=3460214925&tx=KJ4949FFL&pt=1&aff=0B19D771-A501-4A5E-8338-2A822B784D54&utm_source=Job%20Feed&utm_medium=textkernel&utm_campaign=DE&utm_term=0B19D771-A501-4A5E-8338-2A822B784D54

## About the Role

* Proven senior leadership experience in a highly technical, fast-paced organization, with experience operating at scale and leading security through rapid growth. Demonstrated experience owning security strategy and hands-on execution across information security, product security, or security engineering.
 * A software engineering foundation, including experience building production software, security systems, or technical controls.
 * Technical depth across application, infrastructure, cloud, identity, data, and hardware security.
 * Experience securing safety-critical or cyber-physical systems, such as embedded, robotics, aerospace, automotive, or industrial technology.
 * Experience leading serious security incident response and assessing threats from sophisticated external attackers.
 * Judgment balancing security, privacy, legal obligations, safety, engineering velocity, customer needs, and business objectives while working directly in a lean team.

## Description

Zipline operates autonomous delivery systems spanning cloud services, customer and operational data, embedded software, aircraft, and field infrastructure. Security must protect those systems, customers, partners, and the people who rely on them while enabling engineering teams to deliver safely and quickly.

As Head of Information Security, you will own company-wide information security and privacy strategy and lead a lean, technical organization across application, product and corporate security. You will first focus the company on its most consequential risks and remediation decisions, then build the engineering capabilities, controls, and operating model that scale with Zipline. You will define and communicate a clear company-wide security strategy, align leaders around it, and work hands-on with engineers to build and operate the security capabilities that address our highest-priority risks.

As Zipline continues to grow, you'll have the opportunity to grow with it, taking on broader scope and organizational leadership as the company's needs evolve.

What You'll Do

 * Set security and privacy strategy, risk posture, roadmap, operating model, and investment priorities across product, infrastructure, data, corporate technology, and physical systems.
 * Identify and sequence the company's highest-consequence risks, driving clear remediation decisions with Engineering, IT, Legal, Safety, Operations, and Physical Security.
 * Be a pragmatic problem solver who helps engineering teams move quickly and securely. Make tradeoffs clear, find practical ways to reduce risk, and build tools and processes that make secure development easy.
 * Communicate material security and privacy risk clearly to company leaders and partners, translating technical findings into business tradeoffs and investment decisions.
 * Lead a software security engineering team that owns security capabilities in production, contributes fixes and reusable platforms, and works alongside Engineering to eliminate systemic vulnerability classes.
 * Build and develop a high-performing team through hiring, coaching, clear expectations, and direct performance management.
 * Establish security architecture and practices for identity, access control, secrets, data protection, applications, cloud infrastructure, embedded software, aircraft, and field infrastructure.
 * Lead threat modeling, testing, vulnerability management, incident response, and security reviews; measure risk coverage, remediation, readiness, control effectiveness, and secure-engineering adoption.