Sr. Engineer, Infrastructure Security

The role

You will design and operate secure infrastructure and maintain security standards across production environments. You will work on data governance, CI/CD security, and security automation in a remote-first environment.

What you will do

• Identify and mitigate security gaps in infrastructure
• Apply secure-by-default designs across data, endpoints, tools, and processes
• Collaborate on paved-path tooling and processes for least-privilege access
• Develop and audit Terraform configurations
• Triage fleet security posture using security tools
• Partner with Platform, Engineering, and Security teams
• Execute incident handling including detection, containment, remediation, and prevention

Required qualifications

• Hands-on experience securing SaaS products
• Maintaining compliance with frameworks like SOC2, HIPAA/HITRUST, AWS FTR, or ISO 27001
• Proficient with Infrastructure-as-Code (Terraform, CloudFormation)
• Proficient with AWS, Kubernetes, and Python, Go or JavaScript
• Experience with security tools like a CSPM (Wiz), vulnerability scanners, and lifecycle management solutions
• Familiarity with securing data via database column tagging or inline data sanitization
• Understanding of modern deployment patterns like isolated VMs, k8s, and serverless
• Ability to excel in asynchronous communication and self-manage in a remote, distributed team

Benefits

• Remote-first, flexible environment

Before you apply

• Answer in-depth questions in the application
• If you receive an offer, you will need to include your most recent educational experience for a background check

About the company

Zapier builds and uses automation to make work more efficient, creative, and human. The company is on a mission to democratize automation while protecting the security and privacy of millions of users.