Sr. Engineer, Infrastructure Security

Bazeta; United States; Remote; USD 150,000 - 230,000; Full time

Job summary

Zapier is seeking a Senior Infrastructure Security Engineer to bolster security across production environments and design secure infrastructure. You will own defined initiatives, work closely with senior engineers, and contribute to secure, scalable platforms in a remote-first setting.

The role emphasizes Terraform/AWS/Kubernetes, security tooling, data governance, and incident handling, with a focus on least-privilege access and collaborative problem solving across teams.

Qualifications

• Secure cloud environments with SOC2/HIPAA/HITRUST, ISO 27001 awareness.
• Experience with Infrastructure-as-Code (Terraform, CloudFormation), AWS, Kubernetes.
• Familiarity with CSPM tools (e.g., Wiz) and vulnerability scanners.
• Understanding data governance in transit and at rest across systems.
• Ability to review code/design and collaborate with senior engineers.

Responsibilities

• Identify and mitigate security risks in infrastructure to improve resilience.
• Harden infrastructure with secure-by-default designs across data, endpoints, tools, and processes.
• Build scalable processes and enforce least-privilege access while maintaining engineering velocity.
• Develop and audit IaC configurations for security and reliability.
• Triage fleet security posture and manage patching and mitigations.
• Collaborate with Platform, Engineering, and Security teams for guidance and support.
• Demonstrate incident handling: detect, contain, remediate, prevent.

Skills

Terraform

CloudFormation

AWS

Kubernetes

Python

Go

JavaScript

Security tooling

Tools

Wiz

CSPM

Vulnerability scanners

IaC tooling

Job description

# Sr. Engineer, Infrastructure SecurityUnited States8 hours agoID 4040034Price on request## DetailsEmployment type: Full-timeRemote: YesCompany: Zapier## DescriptionAI at Zapier At Zapier , we build and use automation every day to make work more efficient, creative, and human. So if you’re using AI tools while applying here – that’s great! We just ask that you use them responsibly and transparently. Check out our guidance on How to Collaborate with AI During Zapier’s Hiring Process , including how to use AI tools like ChatGPT, Claude, Gemini, or others during our hiring process – and when not to. Location: NAMER/EMEA Role Overview Zapier is on a mission to democratize automation while protecting the security and privacy of millions of users worldwide. We safeguard sensitive data and build trust through robust security measures that enable our teams to move fast, safely. We’re looking for a Senior Infrastructure Security Engineer to help maintain and raise the security bar across our production environments. In this role, you’ll contribute to designing and operating secure infrastructure, collaborating closely with senior engineers while taking ownership of well-defined initiatives. This role is ideal for someone with a strong infrastructure security foundation who’s ready to grow in a high-impact, remote-first environment. About You • You know how to secure the cloud: You have hands-on experience securing SaaS products and maintaining compliance with frameworks like SOC2, HIPAA/HITRUST, AWS FTR, or ISO 27001 • You have an understanding of modern cloud technology components and deployment patterns: Proficient with Infrastructure-as-Code (Terraform, CloudFormation), AWS, Kubernetes, and Python, Go or JavaScript. Experience with security tools like a CSPM (Wiz), vulnerability scanners, and lifecycle management solutions. • You take data governance infrastructure seriously: Whether it’s via database column tagging, leveraging inline data sanitization, or some combination, you’re familiar with securing data as it moves betweens systems. • Security Mindset: You understand modern deployment patterns (isolated VMs, k8s, serverless) and can identify and mitigate common cloud security risks. • Collaborative Approach: You work well with senior engineers, platform teams, and other security specialists, and you’re comfortable asking questions, reviewing code & design, sharing ideas, and learning from others. • Remote-Ready: You excel in asynchronous communication and self-manage effectively in a fully remote, distributed team. • Adaptable: You’ve experienced the fast pace of a growing company and can adjust processes and tools to fit evolving needs. What You’ll Do • Identify & Mitigate Risks: Spot and address security gaps in infrastructure to improve resilience and reduce risk. • Harden Infrastructure: Apply secure-by-default designs across data, endpoints, tools, and processes. • Build Scalable Processes: Collaborate on paved-path tooling and processes that enforce least-privilege access while enabling engineering velocity. • Develop & Audit IaC: Improve Terraform configurations for security, scalability, and reliability. • Triage Fleet Security Posture: Operate and maintain tools that detect and track misconfigurations and vulnerabilities; ensure timely patching and mitigation. • Collaborate Across Teams: Partner with Platform, Engineering, and other Security teams to provide guidance and ad hoc support. • Incident handling: Active understanding and exercise of incident handling execution (detect, contain, remediate, prevent) with systems-level thinking and ability to separate noise from signals. What We’re Working On • Data Governance: Working with our data engineering team to improve data access controls. • CI/CD Security: Improving CI least-privilege access, branch protections, and publishing controls. • Security Automation: Expanding automated guardrails for developers to ship securely and quickly. • Secure Access: Building paths that enable our engineers to interface with the cloud while enforcing least-privilege and audited access. • Kubernetes Image Hardening & IaC Standardization: Creating and deploying consistent, secure Docker images and Terraform modules. Why You’ll Love This Role You’ll join a collaborative, mission-driven security team where your work directly protects millions of users. You’ll have the autonomy to drive improvements while learning from seasoned security professionals, and you’ll do it all in a remote-first, flexible environment that values results over hours logged. How to Apply At Zapier, we believe that diverse perspectives and experiences make us better, which is why we have a non-standard application process designed to promote inclusion and equity. We’re looking for the best fit for each of our roles, regardless of the type of companies in your background, so we encourage you to apply even if your skills and experiences don’t exactly match the job description. All we ask is that you answer a few in-depth questions in our application that would typically be asked at the start of an interview process. This helps speed things up by letting us get to know you and your skillset a bit better right out of the gate. Please be sure to answer each question; the resume and CV fields are optional. Education is not a requirement for our roles; however, if you receive an offer, you will need to include your most recent educational experience as part of our background check process. After you apply, you are going to hear back from us, even if we don’t see an immediate fit with our team. In fact, throughout the process, we strive to never go more than seven days without letting you know the status of your application. We know we’ll make mistakes from time to time, so if you ever have questions about where you stand or about the process, just ask your recruiter!... Source: Jobspresso (https://jobspresso.co/job/sr-engineer-infrastructure-security/)This listing comes from a partner feed. Apply on the source website.Source:ZapierShare Listing provided by Zapier.Price on requestApply on the source websiteActive until Nov 26, 2026