Sr. Engineer, Infrastructure Security
About The Position
Zapier is seeking a Senior Infrastructure Security Engineer to help maintain and raise security across production environments and protect the sensitive data of millions of users. The role contributes to designing and operating secure infrastructure, collaborating with senior engineers, and owning well-defined initiatives in a remote-first environment. The engineer will identify and mitigate infrastructure risks, apply secure-by-default designs, improve Terraform configurations, operate tools for tracking misconfigurations and vulnerabilities, and partner with Platform, Engineering, and Security teams. Work areas include data governance, CI/CD security, security automation, secure cloud access, Kubernetes image hardening, and Infrastructure-as-Code standardization. The role involves incident handling across detection, containment, remediation, and prevention. Zapier describes the team as collaborative and mission-driven, with autonomy to drive improvements, opportunities to learn from experienced security professionals, and a flexible, remote-first environment focused on results.
Requirements
- Hands-on experience securing SaaS products and maintaining compliance with frameworks such as SOC 2, HIPAA/HITRUST, AWS FTR, or ISO 27001.
- Understanding of modern cloud technology components and deployment patterns.
- Proficiency with Infrastructure-as-Code tools such as Terraform or CloudFormation, AWS, Kubernetes, and Python, Go, or JavaScript.
- Familiarity with security tools such as CSPM platforms (for example, Wiz), vulnerability scanners, and lifecycle management solutions.
- Familiarity with data governance infrastructure, such as database column tagging or inline data sanitization, and securing data as it moves between systems.
- Ability to identify and mitigate common cloud security risks across deployment patterns such as isolated VMs, Kubernetes, and serverless.
- Ability to collaborate with senior engineers, platform teams, and security specialists, including asking questions, reviewing code and designs, sharing ideas, and learning from others.
- Ability to communicate asynchronously and self-manage effectively in a fully remote, distributed team.
- Adaptability to the pace of a growing company and to evolving processes and tools.
- Understanding and experience exercising incident handling across detection, containment, remediation, and prevention.
Responsibilities
- Identify and address infrastructure security gaps to improve resilience and reduce risk.
- Apply secure-by-default designs across data, endpoints, tools, and processes.
- Collaborate on paved-path tooling and processes that enforce least-privilege access while enabling engineering velocity.
- Improve Terraform configurations for security, scalability, and reliability.
- Operate and maintain tools that detect and track misconfigurations and vulnerabilities, and ensure timely patching and mitigation.
- Partner with Platform, Engineering, and other Security teams to provide guidance and ad hoc support.
- Handle incidents by detecting, containing, remediating, and preventing them, using systems-level thinking to distinguish meaningful signals from noise.
- Contribute to data access controls, CI least-privilege access, branch protections, publishing controls, automated security guardrails, audited cloud access, Kubernetes image hardening, and standardized Terraform modules.
Benefits
- Flexible, remote-first work environment.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
