Engineer, Infrastructure Security

About Zapier

We're humans who simply think computers should do more work.

At Zapier, we’re not just making software—we’re building a platform to help millions of businesses globally scale with automation and AI. Our mission is to make automation work for everyone by delivering products that delight our customers. You’ll collaborate with brilliant people, use the latest tools, and leverage the flexibility of remote work. Your work will directly fuel our customers’ success, and as they grow, so will you.

Job Details

• Salary: $141.1K - $211.7K
• Location Type: Remote
• Employment Type: FullTime
• Job Posted: 08/15/2025
• Location: NAMER - East Coast Preferred

About the Role

Zapier is on a mission to democratize automation while protecting the security and privacy of millions of users worldwide. We safeguard sensitive data and build trust through robust security measures that enable our teams to move fast, safely.

We’re looking for an Infrastructure Security Engineer to help maintain and raise the security bar across our production environments. In this role, you’ll contribute to designing and operating secure infrastructure, collaborating closely with senior engineers while taking ownership of well-defined initiatives. This role is ideal for someone with a strong infrastructure security foundation who’s ready to grow in a high-impact, remote-first environment.

About You

Cloud Security Experience

• You have hands-on experience securing SaaS products and maintaining compliance with frameworks like SOC2, ISO27001, or HIPAA/HITRUST.
• You have an understanding of modern cloud technology components and deployment patterns:
  • Proficient with Infrastructure-as-Code (Terraform, CloudFormation), AWS, Python, and Kubernetes.
  • Experience with security tools such as CSPM, vulnerability scanners, and lifecycle management solutions.

Security Mindset

• You understand modern deployment patterns (isolated VMs, k8s, serverless) and can identify and mitigate common cloud security risks.

Collaborative Approach

• You work well with senior engineers, platform teams, and other security specialists, and you’re comfortable asking questions, sharing ideas, and learning from others.

Remote-Ready

• You excel in asynchronous communication and self-manage effectively in a fully remote, distributed team.

Adaptable

• You’ve experienced the pace of a growing company and can adjust processes and tools to fit evolving needs.

Things You’ll Do

• Identify & Mitigate Risks: Spot and address security gaps in infrastructure to improve resilience and reduce risk.
• Harden Infrastructure: Apply secure-by-default designs across endpoints, tooling, and processes.
• Build Scalable Processes: Collaborate on paved-path tooling and processes that enforce least-privilege access while enabling engineering velocity.
• Develop & Audit IaC: Improve Terraform/CloudFormation configurations for security, scalability, and reliability.
• Triage Fleet Security Posture: Operate and maintain tools that detect and track misconfigurations and vulnerabilities; ensure timely patching and mitigation.
• Collaborate Across Teams: Partner with Platform, Engineering, and other Security teams to provide guidance and ad hoc support.

What We’re Working On

• Library Image & Terraform Standardization: Creating consistent, secure Docker images and IaC modules.
• Vulnerability Management & Patching: Improving detection, triage, and remediation pipelines for complex infrastructure.
• Security Automation: Expanding automated guardrails for developers to ship securely and quickly.

Our Commitment to Applicants

• Culture and Values at Zapier
• Zapier Guide to Remote Work
• Zapier Code of Conduct
• Diversity and Inclusivity at Zapier

How to Apply

At Zapier, we believe that diverse perspectives and experiences make us better, which is why we have a non-standard application process designed to promote inclusion and equity. We're looking for the best fit for each of our roles, regardless of the type of companies in your background, so we encourage you to apply even if your skills and exp