Sr. Engineer, Infrastructure Security

AI at Zapier At Zapier, we build and use automation every day to make work more efficient, creative, and human. So if you’re using AI tools while applying here - that’s great! We just ask that you use them responsibly and transparently.

Check out our guidance on How to Collaborate with AI During Zapier’s Hiring Process, including how to use AI tools like ChatGPT, Claude, Gemini, or others during our hiring process - and when not to

What you’ll do

• Identify & Mitigate Risks: Spot and address security gaps in infrastructure to improve resilience and reduce risk.
• Harden Infrastructure: Apply secure-by-default designs across data, endpoints, tools, and processes.
• Build Scalable Processes: Collaborate on paved-path tooling and processes that enforce least-privilege access while enabling engineering velocity.
• Develop & Audit IaC: Improve Terraform configurations for security, scalability, and reliability.
• Triage Fleet Security Posture: Operate and maintain tools that detect and track misconfigurations and vulnerabilities; ensure timely patching and mitigation.
• Collaborate Across Teams: Partner with Platform, Engineering, and other Security teams to provide guidance and ad hoc support.
• Incident handling: Active understanding and exercise of incident handling execution (detect, contain, remediate, prevent) with systems-level thinking and ability to separate noise from signals.
• What We’re Working On Data Governance: Working with our data engineering team to improve data access controls.
• CI/CD Security: Improving CI least-privilege access, branch protections, and publishing controls.
• Security Automation: Expanding automated guardrails for developers to ship securely and quickly.
• Secure Access: Building paths that enable our engineers to interface with the cloud while enforcing least-privilege and audited access.
• Kubernetes Image Hardening & IaC Standardization: Creating and deploying consistent, secure Docker images and Terraform modules.
• Why You’ll Love This Role You’ll join a collaborative, mission-driven security team where your work directly protects millions of users.
• You’ll have the autonomy to drive improvements while learning from seasoned security professionals, and you’ll do it all in a remote-first, flexible environment that values results over hours logged