Sr. Engineer, Infrastructure Security
Zapier · NAMER
About the role
A senior infrastructure security engineer on Zapier's remote-first security team, raising the security of the automation platform's production environments alongside senior engineers. The engineer finds and closes infrastructure gaps, hardens systems by default, builds paved paths for least-privilege access, improves Terraform for security, runs CSPM and vulnerability tooling to track misconfigurations and patching, and handles incidents from detection to prevention. Current work includes data access controls, CI/CD least privilege and branch protection, developer guardrails, audited cloud access and hardened Kubernetes images.
It asks for hands-on SaaS security under SOC 2, HIPAA or ISO 27001, Terraform, AWS, Kubernetes, Python, Go or JavaScript, and tools such as Wiz.