{"id":4074912,"url":"https://alion.io/job/zeta-global-principal-infrastructure-security-engineer-2","title":"Principal Infrastructure Security Engineer","company":{"id":5444,"name":"Zeta Global","domain":"zetaglobal.com","url":"https://alion.io/company/zeta-global","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":85,"open_postings":35,"ghost_share":0,"stale_share":0.4,"repost_share":0,"time_to_fill_p50_days":81,"computed_at":"2026-11-11T05:49:22Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["San Francisco, United States","United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":220000,"max":240000,"currency":"USD","period":"year","gross":null,"usd_annual":240000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"ISO 27001","optional":true},{"name":"Kubernetes","optional":true},{"name":"SOC 2","optional":true}],"status":"live","first_seen_at":"2026-11-11T14:43:21Z","employer_posted_date":"2026-11-11","last_verified_at":"2026-11-11T15:04:41Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"WHO WE ARE \nZeta Global (NYSE: ZETA) is the AI-Powered Marketing Cloud that leverages advanced artificial intelligence (AI) and trillions of consumer signals to make it easier for marketers to acquire, grow, and retain customers more efficiently. Through the Zeta Marketing Platform (ZMP), our vision is to make sophisticated marketing simple by unifying identity, intelligence, and omnichannel activation into a single platform - powered by one of the industry’s largest proprietary databases and AI. Our enterprise customers across multiple verticals are empowered to personalize experiences with consumers at an individual level across every channel, delivering better results for marketing programs. Zeta was founded in 2007 by David A. Steinberg and John Sculley and is headquartered in New York City with offices around the world. To learn more, go to www.zetaglobal.com.\nRole Overview\nThis is a hands-on Principal Infrastructure Security opportunity within the DevSecOps practice that strengthens security across our primarily AWS-based infrastructure and software delivery. Partner with AppSec and InfoSec to prevent issues and respond effectively when they arise. This is a player-coach role: set strategy while staying close to the technical work.\nWhat You'll Do\nDefine and execute a risk-based DevSecOps roadmap; establish ownership, metrics, escalation paths, and a plan to grow the team.\nImplement preventive AWS controls for identity, networking, encryption, secrets/key management, and cloud configuration; ensure security-relevant activity is logged for monitoring, investigation, and audit.\nEmbed security into IaC, CI/CD, containers/orchestration, and software supply chains (SCA, secrets scanning, artifact integrity/signing, SBOMs where appropriate), including automated pipeline controls (SAST, IaC/container scanning, policy-as-code).\nPartner with AppSec and InfoSec on security testing, policy, risk, audit evidence, and incident response.\nTriage and prioritize vulnerabilities by exposure, exploitability, and business impact; coordinate remediation, track exceptions, and support investigation, containment, recovery, and post-incident improvement.\nWhat We're Looking For\nRequired qualifications\n10+ years combined experience in software, platform/DevOps, and security engineering; 3+ years as a technical lead.\nExperience leading cross-functional security or infrastructure initiatives and influencing engineering, DevOps/platform, AppSec, and InfoSec teams.\nHands-on AWS security and IAM (least privilege, service identities, privileged access, encryption, networking/security boundaries); experience automating controls with scripting, IaC, CI/CD, and policy-as-code.\nExperience securing delivery pipelines end to end (IaC, CI/CD, containers, dependencies/artifacts, secrets).\nExperience prioritizing vulnerabilities by risk and establishing ownership, escalation, exception, and remediation workflows.\nExperience in security incident investigation, containment, recovery, and post-incident improvement; ability to communicate risk and tradeoffs to leadership.\nPreferred qualifications\nExperience building a security/DevSecOps practice and hiring, developing, or managing engineers.\nKubernetes/container security; software supply chain and secure SDLC practices; security observability/detection partnership with InfoSec/SOC.\nExperience selecting security tools, managing vendors and budgets, and measuring control coverage, risk reduction, and remediation progress.\nFamiliarity with public-company or regulated audit controls (e.g., SOX, SOC 2, ISO 27001).\nBENEFITS & PERKS\nUnlimited PTO\nExcellent medical, dental, and vision coverage\nEmployee Equity\nEmployee Discounts, Virtual Wellness Classes, and Pet Insurance and more!!\nSALARY RANGE\nThe salary range for this role is $220,000 - $240,000, depending on location and experience. \nPEOPLE & CULTURE AT ZETA\nZeta considers applicants for employment without regard to, and does not discriminate on the basis of an individual’s sex, race, color, religion, age, disability, status as a veteran, or national or ethnic origin; nor does Zeta discriminate on the basis of sexual orientation, gender identity or expression. \nWe’re committed to building a workplace culture of trust and belonging, so everyone feels invited to bring their whole selves to work. We provide a forum for employees to celebrate, support, and advocate for one another. Learn more about our commitment to diversity, equity and inclusion here: https://zetaglobal.com/blog/a-look-into-zetas-ergs/ \nZETA IN THE NEWS!\nhttps://zetaglobal.com/press/?cat=press-releases","description_format":"text","description_chars":4609,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Unlimited PTO"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Marketing Automation","Email Marketing","Customer Data Platforms (CDP) & Reverse ETL"],"lifecycle":[{"event":"open","at":"2026-11-11T15:04:41Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 25 · green card filings: 5","filings_12m":25,"filings_prev_12m":20,"green_card_filings_12m":5,"median_offered_wage_usd":197500,"route":null,"cap_exempt":false,"checked_at":"2026-11-11T07:38:50+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":1}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":81,"reasons":["conf:1","win:early"],"computed_at":"2026-11-11T16:55:15Z"},"pay":{"stated_usd_annual":240000,"is_top_pay":true},"html_url":"https://alion.io/job/zeta-global-principal-infrastructure-security-engineer-2","json_url":"https://alion.io/job/zeta-global-principal-infrastructure-security-engineer-2.json","meta":{"generated_at":"2026-11-11T16:55:15Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":32123,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":5444},"rest":"https://alion.io/mcp/rest/get_company?id=5444"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fzeta-global-principal-infrastructure-security-engineer-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fzeta-global-principal-infrastructure-security-engineer-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fzeta-global-principal-infrastructure-security-engineer-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/zeta-global-principal-infrastructure-security-engineer-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fzeta-global-principal-infrastructure-security-engineer-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4074912}},{"tool":"search_jobs","arguments":{"company":"zetaglobal.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4074912},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}