About the role

Senior Infrastructure Security Engineer securing Zapier’s automation platform and production cloud environments. Improving IaC, Kubernetes, CI/CD security, data governance, and incident response.

Responsibilities

Identify and mitigate infrastructure security gaps to improve resilience and reduce risk
Apply secure-by-default designs across data, endpoints, tools, and processes
Collaborate on paved-path tooling and processes enforcing least-privilege access while enabling engineering velocity
Improve Terraform configurations for security, scalability, and reliability
Operate and maintain tools that detect and track misconfigurations and vulnerabilities
Ensure timely patching and mitigation
Partner with Platform, Engineering, and Security teams to provide guidance and ad hoc support
Handle incidents by detecting, containing, remediating, and preventing security issues
Improve data access controls with the data engineering team
Improve CI least-privilege access, branch protections, and publishing controls
Expand automated security guardrails for developers
Build secure access paths for cloud interfaces with least-privilege and audited access
Create and deploy consistent, secure Docker images and Terraform modules

Hands-on experience securing SaaS products and maintaining compliance with SOC 2, HIPAA/HITRUST, AWS FTR, or ISO 27001
Proficiency with Infrastructure-as-Code tools such as Terraform and CloudFormation
Experience with AWS and Kubernetes
Experience with Python, Go, or JavaScript
Experience with security tools such as CSPM (Wiz), vulnerability scanners, and lifecycle management solutions
Familiarity with database column tagging and/or inline data sanitization
Understanding of modern deployment patterns including isolated VMs, Kubernetes, and serverless
Ability to identify and mitigate common cloud security risks
Ability to collaborate with senior engineers, platform teams, and security specialists
Experience working asynchronously and self-managing in a fully remote, distributed team
Experience adapting processes and tools in a fast-growing company
Active understanding and exercise of incident handling: detect, contain, remediate, and prevent
Must be authorized to work from the candidate’s home location; Zapier does not sponsor visas or transfers
Education is not a requirement

Equity
Bonus
Remote-first, flexible work environment
Compensation based on demonstrated experience, job knowledge, skills, abilities, and internal equity
Reasonable accommodations for applicants with disabilities
Response on application status, generally within seven days
No more than one application per candidate per job; 90-day reapplication restriction