> Markdown version of [/jobs/ext/4691349-principal-infrastructure-security-engineer](https://www.wearedevelopers.com/jobs/ext/4691349-principal-infrastructure-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Principal Infrastructure Security Engineer

- **Company:** Zeta Global
- **Location:** United States
- **Experience:** Experienced
- **Salary:** $220,000 - $240,000
- **Contract:** Permanent contract
- **Skills:** Kubernetes Security, Artificial Intelligence, Amazon Web Services, Cyber Security, Continuous Integration, DevOps, Identity and Access Management, Policy as Code, Scripting, Software Security, Kubernetes, Devsecops, Marketing Cloud
- **Published:** November 12, 2026
- **Apply:** https://www.builtincolorado.com/auth/login?destination=/job/principal-infrastructure-security-engineer/12186621

## About the Role

* 10+ years combined experience in software, platform/DevOps, and security engineering; 3+ years as a technical lead.
 * Experience leading cross-functional security or infrastructure initiatives and influencing engineering, DevOps/platform, AppSec, and InfoSec teams.
 * Hands-on AWS security and IAM (least privilege, service identities, privileged access, encryption, networking/security boundaries); experience automating controls with scripting, IaC, CI/CD, and policy-as-code.
 * Experience securing delivery pipelines end to end (IaC, CI/CD, containers, dependencies/artifacts, secrets).
 * Experience prioritizing vulnerabilities by risk and establishing ownership, escalation, exception, and remediation workflows.
 * Experience in security incident investigation, containment, recovery, and post-incident improvement; ability to communicate risk and tradeoffs to leadership., * Experience building a security/DevSecOps practice and hiring, developing, or managing engineers.
 * Kubernetes/container security; software supply chain and secure SDLC practices; security observability/detection partnership with InfoSec/SOC.
 * Experience selecting security tools, managing vendors and budgets, and measuring control coverage, risk reduction, and remediation progress.
 * Familiarity with public-company or regulated audit controls (e.g., SOX, SOC 2, ISO 27001).

## Description

* Define and execute a risk-based DevSecOps roadmap; establish ownership, metrics, escalation paths, and a plan to grow the team.
 * Implement preventive AWS controls for identity, networking, encryption, secrets/key management, and cloud configuration; ensure security-relevant activity is logged for monitoring, investigation, and audit.
 * Embed security into IaC, CI/CD, containers/orchestration, and software supply chains (SCA, secrets scanning, artifact integrity/signing, SBOMs where appropriate), including automated pipeline controls (SAST, IaC/container scanning, policy-as-code).
 * Partner with AppSec and InfoSec on security testing, policy, risk, audit evidence, and incident response.
 * Triage and prioritize vulnerabilities by exposure, exploitability, and business impact; coordinate remediation, track exceptions, and support investigation, containment, recovery, and post-incident improvement.