Head of Infosec

About Zipline

Zipline is the world’s largest and most experienced drone delivery service. We are on a mission to serve all humans equally by ensuring access to food, medicine and essential goods anytime, anywhere. We design, build, and operate the world’s largest autonomous logistics system, delivering critical supplies quickly and reliably. Today, Zipline operates on four continents, makes a delivery somewhere in the world every 30 seconds, and has completed millions of deliveries to date, including blood, vaccines, medical supplies, food, and retail products.

Our customers include the world’s largest and most prominent healthcare systems, governments, retailers, restaurants and global businesses who rely on us to save lives, reduce emissions, increase economic opportunity, and provide delivery from point A to point B as fast as possible. The drone is only 15% of what we’ve built to enable seamless, reliable, global operations.

Our system strengthens supply chains, reduces congestion, and gives people time back. With more than 140 million commercial autonomous miles safely flown, Zipline is redefining access to healthcare, consumer products, and food across the globe.

We operate at a global scale and are looking for practical problem solvers who thrive on real-world challenges and rapid growth. Our team is motivated by building systems that have a direct, meaningful impact on people’s lives and by scaling the future of logistics. We are seeking people who sculpt from first principles, enjoy facing adversity, and can do the impossible at record breaking speeds.

About You and The Role

Zipline operates autonomous delivery systems that combine cloud services, customer and operational data, embedded software, aircraft, and field infrastructure. Security must protect those systems and the people who rely on them while enabling engineering teams to keep delivering.

As Head of Information Security, you will begin as a hands-on leader of a small team, working directly on Zipline’s most consequential security challenges. You will set the company-wide security strategy, turn it into an actionable roadmap, and grow the organization and capabilities needed to deliver it as Zipline scales. You and your team will design, build, and own critical security systems and pipelines while also setting standards and reviewing architecture across the company. You will partner with technical and business leaders to make security part of how Zipline designs and operates.

What You'll Do

• Lead a small security team hands-on, taking direct ownership of priority security work while establishing Zipline’s information-security strategy, roadmap, operating model, and investment priorities across product, infrastructure, data, corporate technology, and cyber-physical systems.

• Scale the security engineering organization to deliver that roadmap, defining ownership boundaries with partner teams and recruiting, developing, and retaining the team needed to support Zipline’s growth and ambitions.

• Build a software security engineering function that designs, builds, and owns critical security systems and pipelines while also reviewing architectures proposed by other engineering teams.

• Partner with software, hardware, infrastructure, IT, legal, privacy, compliance, and operations leaders to embed security in system design and development workflows.

• Set architecture and engineering practices for identity, authentication, authorization, access control, secrets management, data protection, applications, cloud infrastructure, embedded software, aircraft, and field infrastructure.

• Direct threat modeling, secure development, vulnerability management, security testing, incident response, and security reviews; prioritize remediation based on Zipline’s most