Sr. Engineer, Infrastructure Security - Zapier

Role Overview

Zapier is on a mission to democratize automation while protecting the security and privacy of millions of users worldwide. We safeguard sensitive data and build trust through robust security measures that enable our teams to move fast, safely.

We’re looking for a Senior Infrastructure Security Engineer to help maintain and raise the security bar across our production environments. In this role, you’ll contribute to designing and operating secure infrastructure, collaborating closely with senior engineers while taking ownership of well-defined initiatives. This role is ideal for someone with a strong infrastructure security foundation who’s ready to grow in a high-impact, remote-first environment.

About You

• You know how to secure the cloud: You have hands-on experience securing SaaS products and maintaining compliance with frameworks like SOC2, HIPAA/HITRUST, AWS FTR, or ISO 27001.
• Modern cloud technology expertise: Proficient with Infrastructure-as-Code (Terraform, CloudFormation), AWS, Kubernetes, and Python, Go, or JavaScript. Experience with security tools like CSPM (Wiz), vulnerability scanners, and lifecycle management solutions.
• Data governance infrastructure focus: Familiar with securing data as it moves between systems via database column tagging, inline data sanitization, or related techniques.
• Security Mindset: You understand modern deployment patterns (isolated VMs, Kubernetes, serverless) and can identify and mitigate common cloud security risks.
• Collaborative Approach: You work well with platform teams and other security specialists, comfortably asking questions, reviewing code and architecture designs, and sharing ideas.
• Remote-Ready: You excel in asynchronous communication and self-manage effectively in a fully remote, distributed team.
• Adaptable: You have experienced the pace of a growing company and can adjust processes and tooling to fit evolving needs.

What You’ll Do

• Identify & Mitigate Risks: Spot and address security gaps in infrastructure to improve resilience and reduce risk.
• Harden Infrastructure: Apply secure-by-default designs across data, endpoints, tools, and processes.
• Build Scalable Processes: Collaborate on paved-path tooling and processes that enforce least-privilege access while enabling engineering velocity.
• Develop & Audit IaC: Improve Terraform configurations for security, scalability, and reliability.
• Triage Fleet Security Posture: Operate and maintain tools that detect and track misconfigurations and vulnerabilities; ensure timely patching and mitigation.
• Collaborate Across Teams: Partner with Platform, Engineering, and other Security teams to provide guidance and technical support.
• Incident Handling: Participate in incident handling execution (detect, contain, remediate, prevent) with systems-level thinking and the ability to isolate signal from noise.

Current Initiatives

• Data Governance: Working with the data engineering team to improve data access controls.
• CI/CD Security: Enhancing CI least-privilege access, branch protections, and publishing controls.
• Security Automation: Expanding automated guardrails for developers to ship securely and quickly.
• Secure Access: Building paths that enable engineers to interface with cloud infrastructure while enforcing least-privilege and audited access.
• Kubernetes Hardening & IaC Standardization: Creating and deploying consistent, secure Docker images and Terraform modules.