SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Zapier is seeking a Senior Infrastructure Security Engineer to help maintain and raise the security bar across production environments. You'll contribute to designing and operating secure infrastructure, collaborating closely with senior engineers while taking ownership of well-defined initiatives.
In this role, you will identify and mitigate security gaps in infrastructure to improve resilience and reduce risk, harden infrastructure by applying secure-by-default designs across data, endpoints, tools, and processes, and build scalable processes that enforce least-privilege access while enabling engineering velocity. You'll develop and audit Infrastructure-as-Code (Terraform configurations) for security, scalability, and reliability, operate and maintain tools that detect and track misconfigurations and vulnerabilities, and ensure timely patching and mitigation. You'll also collaborate across Platform, Engineering, and other Security teams to provide guidance and ad hoc support, and actively participate in incident handling with systems-level thinking.
Current focus areas include data governance and access controls, CI/CD security improvements, security automation and guardrails, secure access paths with least-privilege enforcement, and Kubernetes image hardening with Infrastructure-as-Code standardization.
This is an ideal role for someone with a strong infrastructure security foundation ready to grow in a high-impact, remote-first environment. You'll join a collaborative, mission-driven security team where your work directly protects millions of users, with autonomy to drive improvements while learning from seasoned security professionals.
REQUIREMENTS:
- Hands-on experience securing SaaS products and maintaining compliance with frameworks such as SOC2, HIPAA/HITRUST, AWS FTR, or ISO 27001
- Proficiency with Infrastructure-as-Code (Terraform, CloudFormation), AWS, Kubernetes, and at least one of Python, Go, or JavaScript
- Experience with security tools including CSPM solutions (e.g., Wiz), vulnerability scanners, and lifecycle management solutions
- Familiarity with securing data as it moves between systems (database column tagging, inline data sanitization, or similar approaches)
- Understanding of modern deployment patterns (isolated VMs, Kubernetes, serverless) and ability to identify and mitigate common cloud security risks
- Strong collaborative approach; ability to work well with senior engineers, platform teams, and other security specialists
- Excellence in asynchronous communication and self-management in fully remote, distributed teams
- Adaptability to fast-paced growth environments with evolving processes and tools
- Education is not required; however, if an offer is extended, most recent educational experience will be needed for background check
