Sr. Engineer, Infrastructure Security

AI at Zapier

At

Zapier

, we build and use automation every day to make work more efficient, creative, and human. So if you’re using AI tools while applying here - that’s great! Check out our guidance on

How to Collaborate with AI During Zapier’s Hiring Process

,

including how to use AI tools like ChatGPT, Claude, Gemini, or others during our hiring process - and when not to.
NAMER/EMEA
Zapier is on a mission to democratize automation while protecting the security and privacy of millions of users worldwide. We safeguard sensitive data and build trust through robust security measures that enable our teams to move fast, safely.
We’re looking for a

Senior

Infrastructure Security Engineer

to help maintain and raise the security bar across our production environments. This role is ideal for someone with a strong infrastructure security foundation who’s ready to grow in a high-impact, remote-first environment.
You know how to secure the cloud:

You have hands-on experience securing SaaS products and maintaining compliance with frameworks like SOC2,HIPAA/HITRUST, AWS FTR, or ISO 27001
You have an understanding of modern cloud technology components and deployment patterns:

Proficient with Infrastructure-as-Code (Terraform, CloudFormation), AWS, Kubernetes, and Python, Go or JavaScript. You take data governance infrastructure seriously:

Whether it’s via database column tagging, leveraging inline data sanitization, or some combination, you’re familiar with securing data as it moves betweens systems.
Security Mindset:

You understand modern deployment patterns (isolated VMs, k8s, serverless) and can identify and mitigate common cloud security risks.
Collaborative Approach:

You work well with senior engineers, platform teams, and other security specialists, and you’re comfortable asking questions, reviewing code & design, sharing ideas, and learning from others.
Remote-Ready:

You excel in asynchronous communication and self-manage effectively in a fully remote, distributed team.
Identify & Mitigate Risks:

Spot and address security gaps in infrastructure to improve resilience and reduce risk.
Apply secure-by-default designs across data, endpoints, tools, and processes.
Develop & Audit IaC:

Improve Terraform configurations for security, scalability, and reliability.
Triage Fleet Security Posture:

Collaborate Across Teams:

Partner with Platform, Engineering, and other Security teams to provide guidance and ad hoc support.
Data Governance:

Working with our data engineering team to improve data access controls.
Expanding automated guardrails for developers to ship securely and quickly.
Building paths that enable our engineers to interface with the cloud while enforcing least-privilege and audited access.
You’ll have the autonomy to drive improvements while learning from seasoned security professionals, and you’ll do it all in a remote-first, flexible environment that values results over hours logged.
At Zapier, we believe that diverse perspectives and experiences make us better, which is why we have a non-standard application process designed to promote inclusion and equity. All we ask is that you answer a few in-depth questions in our application that would typically be asked at the start of an interview process. This helps speed things up by letting us get to know you and your skillset a bit better right out of the gate. the resume and CV fields are optional.
After you apply, you are going to hear back from us—even if we don’t see an immediate fit with our team. In fact, throughout the process, we strive to never go more than seven days without letting you know the status of your application. Zapier does not discriminate based on someones identity in any aspect of hiring or employment as required by law and in line with our commitment to Diversity, Inclusion, Belonging and Equity. Zapier will consider all qualified applicants, including those with criminal histories, consistent with applicable laws.
Zapier prioritizes the security of our customers information and is dedicated to adhering to all applicable data privacy laws. You can review our privacy policy here.
Zapier is committed to inclusion. As part of this commitment, Zapier welcomes applications from individuals with disabilities and will work to provide reasonable accommodations. If reasonable accommodations are needed to participate in the job application or interview process, please contact Deadline:
The anticipated application window is 30 days from the date job is posted, unless the number of applicants requires it to close sooner or later, or if the position is filled.
Even though we’re an all-remote company, we still need to be thoughtful about where we have Zapiens working.