[Hiring] Senior Security Engineer @Zip Co Limited

Role Description

As a Senior Security Engineer, you will be responsible for implementing cloud security controls that ensure the trust and reliability of our Buy Now, Pay Later (BNPL) service. Your day-to-day work will span analyzing an Azure cloud-native, microservices environment for security control gaps and implementing secure configurations and solutions for network, IAM, and application security. You will champion cross-functional collaboration across security and engineering teams and implement globally applicable controls wherever possible.

Interesting problems you’ll get to solve:

• Design, implement, and maintain security controls across Azure and GCP cloud infrastructure, microservices, IAM, network, and application environments.
• Leverage AI-powered tools and automation to improve vulnerability detection, risk prioritization, threat analysis, and remediation.
• Automate manual security processes and build scalable, AI-assisted security workflows.
• Collaborate with engineering and infrastructure teams to proactively identify security gaps, implement solutions, and drive risk reduction.
• Secure the adoption of AI tools and services by evaluating emerging risks and implementing appropriate safeguards.
• Monitor, triage, and remediate vulnerabilities identified through automated security scans and assessments.
• Embed security into CI/CD pipelines, infrastructure-as-code, and engineering workflows through secure-by-default practices.
• Continuously improve security capabilities through emerging technologies, intelligent automation, and modern engineering practices.

Qualifications

• BS or MS in Computer Science, Information Security, or a related technical field; additional credentials in cloud security, offensive security, or risk management are highly valued.
• Security certifications strongly preferred, such as CISSP, CCSP, OSCP, GIAC, or AZ-500.
• 7+ years of experience in security engineering or cloud infrastructure security, ideally in regulated or high-trust environments (e.g., fintech, healthcare, critical infrastructure).
• Hands-on experience with Azure-native security controls (e.g., Microsoft Defender for Cloud, Azure Policy, Sentinel), container security, secrets management, and SSO/IAM integrations.
• Proven ability to work across disciplines and influence without authority, comfortable interfacing with Engineering, Legal, Product, and Audit functions.
• Deep familiarity with threat modeling, security architecture, and risk analysis methodologies (e.g., STRIDE, MITRE ATT&CK).
• Strong written and verbal communication skills, able to articulate complex risks in business terms and influence decision-making.
• Demonstrated use of AI to improve security workflows; you don’t just use security tools, you build smarter ways to manage risk.

Benefits

• Flexible working culture.
• Incentive programs.
• Unlimited PTO.
• Generous paid parental leave.
• Leading family support policies.
• Company-sponsored 401k match.
• Learning and wellness subscription stipend.
• Beautiful Union Square office with a casual dress code.
• Industry-leading, employer-sponsored insurance for you and your dependents, with several 100% Zip-covered choices available.