Senior Engineer, Infrastructure Security

This is a fully remote position, open to applicants in United States, +3 more countries.

📋 Description

• Identify and address infrastructure security vulnerabilities to enhance resilience and minimize risk.

• Implement secure-by-default designs across data, endpoints, tools, and processes.

• Collaborate on paved-path tooling and processes that enforce least-privilege access while promoting engineering efficiency.

• Enhance Terraform configurations for improved security, scalability, and reliability.

• Operate and maintain tools that identify and monitor misconfigurations and vulnerabilities.

• Ensure prompt patching and mitigation of security issues.

• Partner with Platform, Engineering, and Security teams to offer guidance and on-demand support.

• Manage incidents by detecting, containing, remediating, and preventing security threats.

• Strengthen data access controls in collaboration with the data engineering team.

• Enhance CI least-privilege access, branch protections, and publishing controls.

• Expand automated security guardrails for developers.

• Create secure access pathways for cloud interfaces with least-privilege and audited access.

• Develop and deploy consistent, secure Docker images and Terraform modules.

⛳️ Requirements

• Proven experience securing SaaS products and maintaining compliance with SOC 2, HIPAA/HITRUST, AWS FTR, or ISO 27001.

• Proficient with Infrastructure-as-Code tools such as Terraform and CloudFormation.

• Experience with AWS and Kubernetes.

• Familiarity with programming languages such as Python, Go, or JavaScript.

• Background in security tools such as CSPM (Wiz), vulnerability scanners, and lifecycle management solutions.

• Knowledge of database column tagging and/or inline data sanitization.

• Understanding of modern deployment patterns, including isolated VMs, Kubernetes, and serverless architecture.

• Capability to identify and mitigate prevalent cloud security risks.

• Ability to collaborate effectively with senior engineers, platform teams, and security specialists.

• Experience working asynchronously and managing oneself in a fully remote, distributed team.

• Proven ability to adapt processes and tools in a fast-growing company.

• Active understanding and application of incident handling: detect, contain, remediate, and prevent.

• Must be authorized to work from the candidate’s home location; Zapier does not sponsor visas or transfers.

• Formal education is not a prerequisite.

🏝️ Benefits

• Equity.

• Bonus.

• Remote-first, flexible work environment.

• Compensation based on demonstrated experience, job knowledge, skills, abilities, and internal equity.

• Reasonable accommodations for applicants with disabilities.

• Response on application status, generally within seven days.

• No more than one application per candidate per job; 90-day reapplication restriction.