Security Engineer, Zeta Global

• 3+ years of experience in cloud security, information security, or DevSecOps, with a strong foundation in cloud security principles
• Familiarity with CI/CD pipelines and Infrastructure-as-Code (IaC) platforms like Terraform, CloudFormation, or Ansible, with a focus on secure configurations
• Experience administering CNAPPs or similar cloud security tools for continuous monitoring, vulnerability scanning, and compliance
• Basic scripting skills (e.g., Python, Bash) to support security automation and integrate CNAPP capabilities into DevOps workflows
• Strong communication skills, with the ability to explain technical security issues clearly to development and operations teams

Desirable

• We are seeking a DevSecOps Cloud Security Engineer to join our information security team, with a strong focus on using a Cloud-Native Application Protection Platform (CNAPP) to implement and administer cloud security best practices and solutions
• This role is ideal for someone with experience in cloud security and a working knowledge of DevSecOps practices
• The DevSecOps Cloud Security Analyst will play an essential role in embedding security within DevOps workflows, automating security tasks, and continuously monitoring cloud infrastructure for vulnerabilities
• Reporting to the CISO, this position will work closely with the DevOps and Information Security teams to ensure security is deeply integrated across the cloud development lifecycle
• Use the CNAPP tool to integrate security checks directly within CI/CD pipelines, ensuring that code, containers, and infrastructure are scanned for vulnerabilities and compliance before deployment
• Review and secure Infrastructure-as-Code (IaC) templates and configurations using the CNAPP tool, identifying and addressing misconfigurations to ensure all cloud resources meet security standards
• Administer continuous security monitoring, vulnerability detection, and compliance checks via the CNAPP, working to integrate these tools seamlessly into DevOps workflows
• Collaborate closely with DevOps and Engineering teams to interpret and prioritize security findings from the CNAPP, supporting teams with actionable guidance to streamline the remediation of vulnerabilities
• Assist in coordinating responses to cloud security incidents, utilizing insights from the CNAPP to mitigate risks effectively and document best practices for future incidents
• Develop and maintain security dashboards and reporting mechanisms through the CNAPP, providing visibility into security posture, tracking remediation progress, and ensuring alignment with security policies and standards
• Act as a resource on CNAPP usage and cloud security best practices, mentoring junior team members and educating cross-functional teams on secure development and automated security practices