Senior Security Engineer I

The role

You will implement and maintain cloud security controls for Zip's Azure microservices, covering IAM, network and application layers. You will work with security, engineering, infrastructure and data teams to assess risks and build secure deployment pipelines for the Buy Now, Pay Later service.

What you will do

• Implement and maintain cloud-native security controls across Zip's Azure microservices, focusing on IAM, network and application layers
• Proactively identify and mitigate vulnerabilities with engineering and infrastructure teams
• Design, implement and maintain security controls across Azure and GCP cloud infrastructure, microservices, IAM, network and application environments
• Leverage AI-powered tools and automation to improve vulnerability detection, risk prioritization, threat analysis and remediation
• Automate manual security processes and build scalable, AI-assisted security workflows
• Secure the adoption of AI tools and services by evaluating emerging risks and implementing safeguards
• Monitor, triage and remediate vulnerabilities found through automated scans and assessments
• Embed security into CI/CD pipelines, infrastructure-as-code and engineering workflows
• Assess risks and implement AI-specific security controls across security, engineering, infrastructure and data teams
• Continuously improve security capabilities through emerging technologies and modern engineering practices

Required qualifications

• BS or MS in Computer Science, Information Security or a related technical field
• 7+ years of experience in security engineering or cloud infrastructure security
• Hands-on experience with Azure-native security controls (e.g., Microsoft Defender for Cloud, Azure Policy, Sentinel)
• Experience with container security, secrets management and SSO/IAM integrations
• Familiarity with threat modeling, security architecture and risk analysis methods (e.g., STRIDE, MITRE ATT&CK)
• Proven ability to work across disciplines and influence without authority
• Strong written and verbal communication skills, able to explain complex risks in business terms
• Demonstrated use of AI to improve security workflows

Nice to have

• Additional credentials in cloud security, offensive security or risk management
• Security certifications such as CISSP, CCSP, OSCP, GIAC or AZ-500
• Experience in regulated or high-trust environments (e.g., fintech, healthcare, critical infrastructure)

Benefits

• Flexible working culture
• Incentive programs
• Unlimited PTO
• Generous paid parental leave
• Family support policies
• Company-sponsored 401k match
• Learning and wellness subscription stipend
• Employer-sponsored insurance for you and your dependents, with several 100% Zip-covered choices
• Casual dress code at the Union Square office

Before you apply

• Visa sponsorship is not available for this position
• Zip participates in the federal government's E-Verify program

About the company

Zip Co Limited (ASX: ZIP) is a digital financial services company offering point-of-sale credit and digital payment services. It operates in Australia, New Zealand and the US.