Zapier - Sr. Engineer, Infrastructure Security

Remote - San Francisco, California, United States+ Equity1w ago

Remote Senior NA Recruiter Infrastructure Engineer Terraform Close Data Governance Later Kubernetes Docker

Requirements

• Education is not a requirement for our roles; however, if you receive an offer, you will need to include your most recent educational experience as part of our background check process. • After you apply, you are going to hear back from us—even if we don’t see an immediate fit with our team. In fact, throughout the process, we strive to never go more than seven days without letting you know the status of your application. We know we’ll make mistakes from time to time, so if you ever have questions about where you stand or about the process, just ask your recruiter! • Zapier is an equal-opportunity employer and we're excited to work with talented and empathetic people of all identities. Zapier does not discriminate based on someone's identity in any aspect of hiring or employment as required by law and in line with our commitment to Diversity, Inclusion, Belonging and Equity. Our code of conduct provides a beacon for the kind of company we strive to be, and we celebrate our differences because those differences are what allow us to make a product that serves a global user base. Zapier will consider all qualified applicants, including those with criminal histories, consistent with applicable laws. • Zapier prioritizes the security of our customers' information and is dedicated to adhering to all applicable data privacy laws. You can review our privacy policy here. • Zapier is committed to inclusion. As part of this commitment, Zapier welcomes applications from individuals with disabilities and will work to provide reasonable accommodations. If reasonable accommodations are needed to participate in the job application or interview process, please contact [email protected]. • Application Deadline: • The anticipated application window is 30 days from the date job is posted, unless the number of applicants requires it to close sooner or later, or if the position is filled. • Even though we’re an all-remote company, we still need to be thoughtful about where we have Zapiens working. Check out this resource for a list of countries where we currently cannot have Zapiens permanently working.

Responsibilities

• Identify & Mitigate Risks: Spot and address security gaps in infrastructure to improve resilience and reduce risk. • Identify & Mitigate Risks: • Harden Infrastructure: Apply secure-by-default designs across data, endpoints, tools, and processes. • Harden Infrastructure: • Build Scalable Processes: Collaborate on paved-path tooling and processes that enforce least-privilege access while enabling engineering velocity. • Build Scalable Processes: • Develop & Audit IaC: Improve Terraform configurations for security, scalability, and reliability. • Develop & Audit IaC: • Triage Fleet Security Posture: Operate and maintain tools that detect and track misconfigurations and vulnerabilities; ensure timely patching and mitigation. • Triage Fleet Security Posture: • Collaborate Across Teams: Partner with Platform, Engineering, and other Security teams to provide guidance and ad hoc support. • Collaborate Across Teams: • Incident handling: Active understanding and exercise of incident handling execution (detect, contain, remediate, prevent) with systems-level thinking and ability to separate noise from signals. • Incident handling: • What We’re Working On • Data Governance: Working with our data engineering team to improve data access controls. • Data Governance: • CI/CD Security: Improving CI least-privilege access, branch protections, and publishing controls. • CI/CD Security • Security Automation: Expanding automated guardrails for developers to ship securely and quickly. • Security Automation: • Secure Access: Building paths that enable our engineers to interface with the cloud while enforcing least-privilege and audited access. • Secure Access: • Kubernetes Image Hardening & IaC Standardization: Creating and deploying consistent, secure Docker images and Terraform modules. • Kubernetes Image Hardening & IaC Standardization:

Benefits

• You’ll join a collaborative, mission-driven security team where your work directly protects millions of users. You’ll have the autonomy to drive improvements while learning from seasoned security professionals, and you’ll do it all in a remote-first, flexible environment that values results over hours logged.