Senior Infrastructure Security Engineer
New
Z
ZapierInfrastructure security
Location: NAMER; Secondary Locations: EMEAFull-TimeSenior
Salary$174.2K - $261.2K; $174.2K – $261.2K • Offers Equity • Offers Bonus; United States: $174.2K – $261.2K; Canada: CA$174.2K – CA$261.2K • Offers Equity • Offers Bonus; Spain: €92.6K – €139K • Offers Equity • Offers Bonus; United Kingdom: £109.4K – £164.2K • Offers Equity • Offers Bonus
Apply NowOpens the employer's application page
Job Details
- Required Skills
- AWSPythonKubernetesTerraformCloudFormation
Requirements
- Have hands-on experience securing SaaS products.
- Have experience maintaining compliance with frameworks such as SOC 2, HIPAA/HITRUST, AWS FTR, or ISO 27001.
- Be proficient with Infrastructure as Code, including Terraform or CloudFormation.
- Have experience with AWS and Kubernetes.
- Be proficient in Python, Go, or JavaScript.
- Have experience with security tools such as CSPM (Wiz), vulnerability scanners, and lifecycle management solutions.
- Understand modern cloud technology components and deployment patterns, including isolated VMs, Kubernetes, and serverless.
- Be familiar with securing data as it moves between systems, including database column tagging or inline data sanitization.
- Be able to identify and mitigate common cloud security risks.
- Understand incident handling across detection, containment, remediation, and prevention.
Responsibilities
- Identify and address infrastructure security gaps to improve resilience and reduce risk.
- Apply secure-by-default designs across data, endpoints, tools, and processes.
- Collaborate on paved-path tooling and processes that enforce least-privilege access.
- Improve Terraform configurations for security, scalability, and reliability.
- Operate and maintain tools that detect and track misconfigurations and vulnerabilities, and support timely patching and mitigation.
- Partner with Platform, Engineering, and Security teams to provide guidance and ad hoc support.
- Execute incident handling activities, including detection, containment, remediation, and prevention.
- Improve data access controls with the data engineering team.
- Contribute to CI least-privilege access, branch protections, publishing controls, and automated security guardrails.
- Create and deploy consistent, secure Docker images and Terraform modules.
View Full Description & ApplyYou'll be redirected to the employer's site
