Skip to content
CISO Spotlights

Career profile

David Soto

Chief Information Security Officer, Trellix

Status
Current role, per sources checked 27 September 2026
Appointed
24 August 2026
Published

Compiled 27 September 2026 from public records. Each statement below is drawn from the sources listed at the end.

David Soto is the chief information security officer of Trellix, responsible for the company's enterprise security program and its resilience work.

Trellix's own announcement dates his appointment, alongside that of a new go-to-market chief operating officer.

Career path

Soto's career began in the U.S. Air Force, where the company's leadership page places his start as a systems and network engineer.

He went on to hold security leadership posts at Check Point, Optiv and Pacific Life before joining Amazon, where Trellix says he built a large-scale infrastructure security program.

At Amazon, as Head of Infrastructure Security, he grew a security program spanning roughly 4,000 sites across 30 countries and more than three million assets for the company's operations and grocery businesses.

The Trellix press release adds that this work included anomaly-detection systems protecting employees working alongside automation and robotics at scale.

He has also served on the board of the Orange County CISO Roundtable since 2017.

The Trellix seat

Trellix says Soto will lead its enterprise security program, drive its resilience transformation, and act as executive steward of its internal Customer Zero testing program, exemplifying the protection the company says it delivers to customers within its own environment.

On joining, he said: "At a moment when machine-speed adversaries are redefining what resilience requires, I'm energized to join a team already at the frontier of this fight."

About the employer

Trellix describes itself as combining AI-native security, operational threat intelligence, and automated detection and response to provide defense-grade protection across on-premises, air-gapped, operational technology, hybrid and cloud environments.

Neither Trellix page states the date Soto began at Amazon or how long he held each earlier post.

Sources

  1. 1.
    Trellixtrellix.com · undated page · checked 27 September 2026 · tier A
  2. 2.
    Trellixtrellix.com · published 24 August 2026 · checked 27 September 2026 · tier A

Tier A: the organization itself, a regulator or a government page. Tier B: established trade or business press.