Sr. Engineer, Infrastructure Security
Zapier
SeniorAbout the position
Join a mission-driven security team to enhance infrastructure security and protect user data in a remote-first environment.
Tech stack
- aws
- terraform
- kubernetes
- security
- python
- go
- javascript
Requirements
Required:
- Hands-on experience securing SaaS products and maintaining compliance with frameworks like SOC2, HIPAA/HITRUST, AWS FTR, or ISO 27001
- Proficient with Infrastructure-as-Code (Terraform, CloudFormation), AWS, Kubernetes, and Python, Go or JavaScript
- Familiar with securing data as it moves between systems through various governance methods
- Understanding of modern deployment patterns and ability to identify and mitigate common cloud security risks
Nice to have:
- Experience with security tools like a CSPM (Wiz), vulnerability scanners, and lifecycle management solutions
- Ability to collaborate effectively with senior engineers, platform teams, and other security specialists
- Experience in a fast-paced growing company and adaptability to evolving needs
Responsibilities
- Identify and address security gaps in infrastructure to improve resilience and reduce risk
- Apply secure-by-default designs across data, endpoints, tools, and processes
- Collaborate on paved-path tooling and processes that enforce least-privilege access while enabling engineering velocity
- Operate and maintain tools that detect and track misconfigurations and vulnerabilities
Benefits
- Autonomy to drive improvements while learning from seasoned security professionals
- Flexible remote-first environment that values results over hours logged