Sr. Engineer, Infrastructure Security

About this role

Help secure and improve Zapier’s production infrastructure, protecting customer data while enabling engineering teams to work safely and efficiently. The role focuses on cloud security, infrastructure hardening, security automation, and incident response in a remote-first environment.

About the company

Zapier is a web-based automation tool that connects various applications, enabling users to automate workflows and streamline processes without requiring coding skills. The company serves individuals and businesses looking to enhance productivity through integration and automation solutions.

Stack

What you'll do

• Identify and mitigate infrastructure security risks.
• Harden infrastructure and apply secure-by-default designs.
• Improve Terraform configurations and security guardrails.
• Operate tools that detect misconfigurations and vulnerabilities, and coordinate remediation.
• Support incident detection, containment, remediation, and prevention.
• Partner with Platform, Engineering, and Security teams on security guidance and initiatives.

What we're looking for

• Hands-on experience securing production cloud infrastructure and SaaS products.
• Experience maintaining compliance with frameworks such as SOC 2, HIPAA/HITRUST, AWS FTR, or ISO 27001.
• Knowledge of AWS, Kubernetes, infrastructure-as-code, and Python, Go, or JavaScript.
• Familiarity with CSPM, vulnerability scanning, and lifecycle management tools.
• Understanding of data governance, access controls, and data protection between systems.
• Ability to work asynchronously and collaborate effectively in a remote team.

Nice to have

• Experience with Wiz or similar cloud security posture management tools.
• Experience with CI/CD security, Kubernetes image hardening, or secure access tooling.

Benefits

• Equity
• Bonus