Senior Security Engineer: Production Systems & Autonomous Ops

Zipline; South San Francisco (CA); Hybrid; USD 180,000 - 240,000; Full time

Job summary

Zipline is seeking a senior security leader to own security for production services that power fleet orchestration, DC automation, telemetry, and developer tools. You will reduce risk by implementing robust controls, threat modeling, and vulnerability management in a hybrid on-site role at our South San Francisco HQ.

You will collaborate with SREs, platform engineers, autonomy/embedded teams, and compliance to translate safety requirements into concrete technical controls and incident response

Qualifications

• 8+ years building and operating security controls for large-scale production systems.
• Hands-on engineering with Python/Go and integrations with AI tools.
• Experience with Kubernetes, IAM, CI/CD, and secrets management.
• Ownership of vulnerability management and incident response processes.
• Experience securing systems interfacing with physical systems, regulated workflows, or third-party partners.

Responsibilities

• Own security outcomes for major production areas and be the primary owner for at least one.
• Define metrics and drive risk reduction with defined targets in 6–12 months.
• Design production controls: IAM/least-privilege policies, service-to-service trust, KMS integrations, CI/CD security, and edge device updates.
• Threat model and secure design reviews for systems near fleet or partner interfaces; produce mitigations.
• Lead vulnerability management end-to-end with remediation plans and verification.
• Build incident response playbooks and run tabletop exercises; participate in postmortems.
• Secure AI/agent-assisted development and ops by defining guardrails and monitoring.

Skills

Security engineering

Cloud security

Threat modeling

Incident response

Vulnerability management

IAM & least privilege

CI/CD security

KMS & secrets

Tools

Python

Go

Job description

Zipline is seeking a senior security leader to own security for production services that power fleet orchestration, DC automation, telemetry, and developer tools. You will reduce risk by implementing robust controls, threat modeling, and vulnerability management in a hybrid on-site role at our South San Francisco HQ.

You will collaborate with SREs, platform engineers, autonomy/embedded teams, and compliance to translate safety requirements into concrete technical controls and incident response