Senior Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Implement and uphold cloud-native security measures across Zip’s Azure microservices, emphasizing IAM, network, and application layers.

• Identify and address vulnerabilities in collaboration with engineering and infrastructure teams.

• Examine Azure cloud-native microservices for any security control deficiencies.

• Establish secure configurations and solutions for network, IAM, and application security.

• Promote teamwork between security and engineering teams.

• Enforce globally relevant security controls.

• Evaluate risks across security, engineering, infrastructure, and data teams.

• Apply AI-specific security measures.

• Automate secure deployment processes.

• Guide the secure integration of new AI tools and services.

• Design and sustain controls across Azure and GCP infrastructure, microservices, IAM, network, and application environments.

• Utilize AI-driven tools and automation for vulnerability detection, risk prioritization, threat analysis, and remediation.

• Develop scalable, AI-enhanced security workflows.

• Monitor, triage, and resolve vulnerabilities identified through automated scans and assessments.

• Integrate security into CI/CD pipelines, infrastructure-as-code, and engineering processes.

• Continuously enhance security capabilities through emerging technologies and modern engineering practices.

⛳️ Requirements

• BS or MS in Computer Science, Information Security, or a related technical discipline; additional qualifications in cloud security, offensive security, or risk management are highly regarded.

• Security certifications are strongly preferred, including CISSP, CCSP, OSCP, GIAC, or AZ-500.

• Over 7 years of experience in security engineering or cloud infrastructure security.

• Experience is ideally in regulated or high-trust sectors such as fintech, healthcare, or critical infrastructure.

• Practical experience with Azure-native security controls, including Microsoft Defender for Cloud, Azure Policy, and Sentinel.

• Familiarity with container security, secrets management, and SSO/IAM integrations.

• Capability to work across various disciplines and influence without direct authority.

• Ability to interact with Engineering, Legal, Product, and Audit departments.

• Understanding of threat modeling, security architecture, and risk analysis methodologies such as STRIDE and MITRE ATT&CK.

• Exceptional written and verbal communication skills.

• Proven application of AI to enhance security workflows.

• Must be a US-based employee.

• Visa sponsorship is not offered for this position.

🏝️ Benefits

• Flexible working culture.

• Incentive programs.

• Unlimited PTO.

• Generous paid parental leave.

• Leading family support policies.

• Company-sponsored 401k match.

• Learning and wellness subscription stipend.

• Beautiful Union Square office with a casual dress code.

• Industry-leading, employer-sponsored insurance for you and your dependents, with several 100% Zip-covered options available.

• Bonus and/or commission awards may be included in total compensation.

• AI opt-out request available for the hiring process.