Z
Sr. Engineer, Infrastructure Security
Contract type
Ongoing
Work mode
Remote · NAMER/EMEA
Experience
Senior · Not stated
Level inferred from job title
Job description
A Senior Infrastructure Security Engineer role at Zapier focused on maintaining and raising the security bar across production environments. The engineer designs and operates secure infrastructure, develops and audits IaC, and collaborates with platform and engineering teams.
At a glance
- Work mode
- Remote · NAMER/EMEA
What you'll do
- Identify and address security gaps in infrastructure to improve resilience and reduce risk
- Apply secure-by-default designs across data, endpoints, tools, and processes
- Collaborate on paved-path tooling and processes that enforce least-privilege access while enabling engineering velocity
- Improve Terraform configurations for security, scalability, and reliability
- Operate and maintain tools that detect and track misconfigurations and vulnerabilities; ensure timely patching and mitigation
- Partner with Platform, Engineering, and other Security teams to provide guidance and ad hoc support
- Exercise incident handling execution (detect, contain, remediate, prevent) with systems-level thinking
What we're looking for
- Hands-on experience securing SaaS products and maintaining compliance with frameworks like SOC2, HIPAA/HITRUST, AWS FTR, or ISO 27001
- Understanding of modern cloud technology components and deployment patterns
- Proficient with Infrastructure-as-Code (Terraform, CloudFormation), AWS, Kubernetes, and Python, Go or JavaScript
- Experience with security tools like a CSPM (Wiz), vulnerability scanners, and lifecycle management solutions
- Familiarity with securing data as it moves between systems (e.g., database column tagging, inline data sanitization)
- Understanding of modern deployment patterns (isolated VMs, k8s, serverless) and ability to identify and mitigate common cloud security risks
- Works well with senior engineers, platform teams, and other security specialists; comfortable asking questions, reviewing code & design, sharing ideas, and learning from others
- Excels in asynchronous communication and self-manages effectively in a fully remote, distributed team
- Has experienced the fast pace of a growing company and can adjust processes and tools to fit evolving needs
Your team
Security team
A collaborative, mission-driven security team that safeguards sensitive data and builds trust through robust security measures.
Apply
Direct apply at Zapier
Opens the job posting at Zapier
About Zapier
Mission
Democratize automation while protecting the security and privacy of millions of users worldwide.