Sr. Engineer, Infrastructure Security
Zapier · Engineering · Senior · 23d ago
$174k – $261k
per year
Open to candidates across North America, EMEA.
Direct from the employer's own careers page
Who can apply
Read straight from the listing, so you know before you spend time on it.
Open to candidates across North America, EMEA.
“Location: NAMER/EMEA”
Team members are located across North America and EMEA.
- Async-first
- Zapier operates as a fully remote team prioritizing asynchronous communication and flexible working hours.
- Contractor / B2B
- No mention of hiring international contractors or invoicing.
- Global stipend
- No home office or equipment budget mentioned.
- Annual retreat
- No company-paid get-togethers mentioned.
Read from the listing automatically. Always confirm the details with the company before you accept an offer.
About the role
As a Senior Infrastructure Security Engineer at Zapier, you will maintain and raise the security bar across production environments. You will contribute to designing and operating secure infrastructure, collaborate closely with engineering and platform teams, enforce least-privilege access, and build paved-path tooling that enables developer velocity while reducing risk.
What you'll do
- Identify and mitigate infrastructure security risks and address security gaps across data, endpoints, tools, and processes.
- Collaborate on paved-path tooling and automated processes that enforce least-privilege access while enabling engineering velocity.
- Develop, audit, and improve Infrastructure-as-Code (Terraform) configurations for security, reliability, and scalability.
- Operate and maintain tooling to detect misconfigurations and vulnerabilities, ensuring prompt mitigation and patch deployment.
- Participate in incident handling execution including detection, containment, remediation, and prevention.
- Partner with platform, engineering, and data teams to deliver guidance, improve data access controls, and harden container images.
What you bring
- Hands-on experience securing SaaS products and maintaining compliance with frameworks such as SOC 2, HIPAA/HITRUST, AWS FTR, or ISO 27001.
- Proficiency with Infrastructure-as-Code (Terraform, CloudFormation), AWS, Kubernetes, and scripting in Python, Go, or JavaScript.
- Familiarity with security tools such as CSPMs (Wiz), vulnerability scanners, and lifecycle management solutions.
- Experience with data governance infrastructure, such as database column tagging and inline data sanitization.
- Strong communication skills with the ability to work asynchronously and self-manage in a distributed team.
About Zapier
Zapier is a fully remote company on a mission to democratize automation for businesses and individuals worldwide.
View Zapier profile & open roles →