Terraform
AWS
Kubernetes

Sr. Engineer, Infrastructure Security

Overview

Zapier is on a mission to democratize automation while protecting the security and privacy of millions of users worldwide.

Job Description

In this role, you’ll contribute to designing and operating secure infrastructure, collaborating closely with senior engineers while taking ownership of well-defined initiatives.

Responsibilities

  • - Identify & Mitigate Risks: Spot and address security gaps in infrastructure to improve resilience and reduce risk.
  • - Harden Infrastructure: Apply secure-by-default designs across data, endpoints, tools, and processes.
  • - Build Scalable Processes: Collaborate on paved-path tooling and processes that enforce least-privilege access while enabling engineering velocity.
  • - Develop & Audit IaC: Improve Terraform configurations for security, scalability, and reliability.
  • - Triage Fleet Security Posture: Operate and maintain tools that detect and track misconfigurations and vulnerabilities; ensure timely patching and mitigation.
  • - Collaborate Across Teams: Partner with Platform, Engineering, and other Security teams to provide guidance and ad hoc support.
  • - Incident handling: Active understanding and exercise of incident handling execution (detect, contain, remediate, prevent) with systems-level thinking and ability to separate noise from signals.

Required Skills

  • - Hands-on experience securing SaaS products and maintaining compliance with frameworks like SOC2, HIPAA/HITRUST, AWS FTR, or ISO 27001.
  • - Proficient with Infrastructure-as-Code (Terraform, CloudFormation), AWS, Kubernetes, and Python, Go or JavaScript.
  • - Experience with security tools like a CSPM (Wiz), vulnerability scanners, and lifecycle management solutions.
  • - Familiar with securing data as it moves between systems.
  • - Understand modern deployment patterns (isolated VMs, k8s, serverless) and can identify and mitigate common cloud security risks.
  • - Work well with senior engineers, platform teams, and other security specialists, and comfortable asking questions, reviewing code & design, sharing ideas, and learning from others.
  • - Excel in asynchronous communication and self-manage effectively in a fully remote, distributed team.
  • - Adaptable to the fast pace of a growing company and can adjust processes and tools to fit evolving needs.

Benefits

  • - Offers Equity
  • - Offers Bonus

About the company

Zapier puts the power of automation in your hands—no coding required. Take your workflows to the next level with our suite of automation tools.


All Job Openings at Zapier