Senior Infrastructure Security Engineer

Location: Remote; NAMER/EMEA

Salary: United States $174.2K–$261.2K; Canada CA$174.2K–CA$261.2K; Spain €92.6K–€139K; United Kingdom £109.4K–£164.2K. Equity and bonuses are offered in Canada, Spain, and the United Kingdom.

Company

Zapier builds automation products designed to make work more efficient, creative, and human, while protecting the security and privacy of millions of users.

What you will do

• Identify and mitigate infrastructure security gaps to improve resilience and reduce risk.
• Apply secure-by-default designs across data, endpoints, tools, and processes.
• Build paved-path tooling and scalable processes that enforce least-privilege access while supporting engineering velocity.
• Develop and audit Terraform configurations, standardize secure Terraform modules, and create hardened Kubernetes and Docker images.
• Operate security posture, vulnerability management, patching, and mitigation tools across the infrastructure fleet.
• Partner with Platform, Engineering, Data Engineering, and Security teams on data governance, CI/CD security, secure cloud access, and incident handling.

Requirements

• Hands-on experience securing SaaS products and maintaining compliance with SOC 2, HIPAA/HITRUST, AWS FTR, or ISO 27001.
• Proficiency with modern cloud technologies and deployment patterns, including AWS, Kubernetes, Infrastructure-as-Code with Terraform or CloudFormation, and Python, Go, or JavaScript.
• Experience with security tools such as CSPM platforms, including Wiz, vulnerability scanners, and lifecycle management solutions.
• Knowledge of securing data in transit between systems through database column tagging, inline data sanitization, or comparable controls.
• Understanding of isolated virtual machines, Kubernetes, serverless deployments, and common cloud security risks.
• Active understanding and practical experience with incident handling, including detection, containment, remediation, and prevention.
• Ability to collaborate with senior engineers, platform teams, and security specialists through code and design reviews, guidance, and knowledge sharing.
• Ability to communicate asynchronously, self-manage effectively, and adapt processes and tools in a fast-growing company.
• Education is not required; the most recent educational experience is required for background checks after an offer.

Culture & Benefits

• Fully remote, flexible, distributed work environment focused on results rather than hours logged.
• Collaborative, mission-driven security team with autonomy and opportunities to learn from experienced security professionals.
• Competitive and transparent compensation practices based on demonstrated impact, experience, skills, and internal equity.
• Equity and bonus opportunities are offered for roles in Canada, Spain, and the United Kingdom.
• Inclusive hiring approach with reasonable accommodations available during the application and interview process.

Hiring process

• Complete in-depth application questions; resume and CV fields are optional.
• Applicants receive status updates throughout the process, with an effort to respond at least every seven days.
• The anticipated application window is 30 days from posting, subject to applicant volume and role status.