SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 250,000 - 350,000 / annual
Zipline is the world's largest autonomous drone delivery service, operating on four continents and completing millions of deliveries of critical supplies including blood, vaccines, medical supplies, food, and retail products. The company has flown over 140 million commercial autonomous miles and operates a complex global logistics system spanning cloud services, embedded software, aircraft, and field infrastructure.
As Head of Information Security, you will own company-wide information security and privacy strategy and lead a lean, technical organization across application, product, and corporate security. You will establish the company's security posture, identify and sequence the highest-consequence risks, and drive clear remediation decisions in collaboration with Engineering, IT, Legal, Safety, Operations, and Physical Security teams.
Key responsibilities include:
- Setting security and privacy strategy, risk posture, roadmap, operating model, and investment priorities across product, infrastructure, data, corporate technology, and physical systems
- Identifying and sequencing the company's highest-consequence risks and driving remediation decisions
- Acting as a pragmatic problem solver who helps engineering teams move quickly and securely, making tradeoffs clear and building tools that enable secure development
- Communicating material security and privacy risks to company leaders and partners, translating technical findings into business decisions
- Leading a software security engineering team that owns security capabilities in production and works alongside engineering to eliminate systemic vulnerability classes
- Building and developing a high-performing team through hiring, coaching, and performance management
- Establishing security architecture and practices for identity, access control, secrets, data protection, applications, cloud infrastructure, embedded software, aircraft, and field infrastructure
- Leading threat modeling, testing, vulnerability management, incident response, and security reviews; measuring risk coverage and control effectiveness
This role requires working onsite five days a week at the South San Francisco office.
REQUIREMENTS:
- Proven senior leadership experience in a highly technical, fast-paced organization, with experience operating at scale and leading security through rapid growth
- Demonstrated experience owning security strategy and hands-on execution across information security, product security, or security engineering
- Software engineering foundation, including experience building production software, security systems, or technical controls
- Technical depth across application, infrastructure, cloud, identity, data, and hardware security
- Experience securing safety-critical or cyber-physical systems, such as embedded, robotics, aerospace, automotive, or industrial technology
- Experience leading serious security incident response and assessing threats from sophisticated external attackers
- Judgment balancing security, privacy, legal obligations, safety, engineering velocity, customer needs, and business objectives