[Hiring] Senior Infrastructure Security Engineer @Zapier

Role Description

Zapier is on a mission to democratize automation while protecting the security and privacy of millions of users worldwide. We safeguard sensitive data and build trust through robust security measures that enable our teams to move fast, safely.

We’re looking for a Senior Infrastructure Security Engineer to help maintain and raise the security bar across our production environments. In this role, you’ll contribute to designing and operating secure infrastructure, collaborating closely with senior engineers while taking ownership of well-defined initiatives. This role is ideal for someone with a strong infrastructure security foundation who’s ready to grow in a high-impact, remote-first environment.

Qualifications

• Hands-on experience securing SaaS products and maintaining compliance with frameworks like SOC2, HIPAA/HITRUST, AWS FTR, or ISO 27001.
• Proficient with Infrastructure-as-Code (Terraform, CloudFormation), AWS, Kubernetes, and Python, Go or JavaScript.
• Familiar with security tools like a CSPM (Wiz), vulnerability scanners, and lifecycle management solutions.
• Experience with securing data as it moves between systems through database column tagging and inline data sanitization.
• Understanding of modern deployment patterns (isolated VMs, k8s, serverless) and ability to identify and mitigate common cloud security risks.
• Collaborative approach, comfortable asking questions, reviewing code & design, sharing ideas, and learning from others.
• Excel in asynchronous communication and self-manage effectively in a fully remote, distributed team.
• Ability to adjust processes and tools to fit evolving needs in a fast-paced environment.

Requirements

• Identify and address security gaps in infrastructure to improve resilience and reduce risk.
• Apply secure-by-default designs across data, endpoints, tools, and processes.
• Collaborate on paved-path tooling and processes that enforce least-privilege access while enabling engineering velocity.
• Improve Terraform configurations for security, scalability, and reliability.
• Operate and maintain tools that detect and track misconfigurations and vulnerabilities; ensure timely patching and mitigation.
• Partner with Platform, Engineering, and other Security teams to provide guidance and ad hoc support.
• Active understanding and exercise of incident handling execution (detect, contain, remediate, prevent) with systems-level thinking.

Benefits

• Join a collaborative, mission-driven security team where your work directly protects millions of users.
• Autonomy to drive improvements while learning from seasoned security professionals.
• Work in a remote-first, flexible environment that values results over hours logged.

Company Description

Zapier is an equal-opportunity employer and we're excited to work with talented and empathetic people of all identities. Zapier does not discriminate based on someone's identity in any aspect of hiring or employment as required by law and in line with our commitment to Diversity, Inclusion, Belonging and Equity.

Zapier prioritizes the security of our customers' information and is dedicated to adhering to all applicable data privacy laws.

Zapier is committed to inclusion and welcomes applications from individuals with disabilities, providing reasonable accommodations as needed.