Senior/Staff Security Engineer - Product Security

The role

You will own security for production services and integrations including fleet orchestration, distribution center automation, and developer toolchains. You will design production controls, perform threat modeling, and lead vulnerability management to reduce risk in production systems.

What you will do

• Own security outcomes for 2-4 named production areas
• Deliver measurable risk reduction through defined metrics
• Design and implement production controls like IAM and secure OTA patterns
• Threat model and perform secure design reviews for services
• Lead end-to-end vulnerability management for owned services
• Build and harden incident response for product incidents
• Secure AI/agent-assisted development and ops
• Integrate external pentest and red-team results into engineering changes
• Collaborate with SREs, platform, autonomy, and field ops teams

Required qualifications

• 8+ years building and operating security controls for large-scale production systems across application and cloud infrastructure
• Hands-on engineering ability to ship automation or tooling in Python, Go, or similar
• Ability to build integrations with AI tools and agentic security bots
• Deep practical experience with cloud-native stacks and microservices
• Prior ownership of vulnerability management, incident response playbooks, and verification processes
• Direct experience threat-modeling and securing systems interfacing with physical systems, regulated workflows, or third-party partners
• Ability to define and track quantitative success metrics
• Operates as a technical owner
• Skeptical, adversarial mindset

Nice to have

• Experience securing LLM/agentic tools in engineering workflows and mitigating OWASP LLM risks
• Background across multiple domains (cloud infra, web services, and embedded/autonomy)
• Experience building developer-friendly security platforms or paved-road tooling

Before you apply

• Candidates must be prepared for on-call participation when assigned

About the company

Zipline is the world’s largest and most experienced drone delivery service. They operate an autonomous logistics system to deliver food, medicine, and essential goods globally.