[All remote jobs](https://jobicy.com/jobs.md)[![Zapier logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/03/Jobicy-210317121153-967239.png)](https://jobicy.com/company/zapier.md)[Zapier](https://jobicy.com/company/zapier.md) # Sr. Engineer, Infrastructure Security Review the role, location requirements, compensation details, and application process before deciding whether this opportunity fits your next career move. [Apply for this job](#job-application)[View company](https://jobicy.com/company/zapier.md)ShareRemote from[USA](https://jobicy.com/job-region/usa.md), [Canada](https://jobicy.com/job-region/canada.md), [EMEA](https://jobicy.com/job-region/emea.md)SalaryUSD 174,200–261,200 / yrDepartment[Cybersecurity](https://jobicy.com/categories/cybersecurity.md)EmploymentFull TimeExperienceSeniorPublished23 Oct 2026Apply before22 Nov 2026Listing views39Application actions3Application toolkit ## Make your next move. Prepare your resume, explore your fit, and draft a cover letter for this opportunity. AI Summary ## The role, at a glance. Zapier is hiring a Senior Infrastructure Security Engineer to strengthen security across its cloud production environments in a remote-first organization. The role focuses on identifying infrastructure risks, hardening systems, improving secure-by-default Terraform and Kubernetes patterns, and operating vulnerability and misconfiguration tooling. The engineer will partner with platform, engineering, data, and security teams on least-privilege access, data governance, CI/CD security, and incident handling. Success requires strong hands-on cloud security expertise, effective asynchronous collaboration, and the ability to independently deliver well-defined security improvements. ## Role DNA A quick view of the complexity, pace, ownership and collaboration implied by the job description. ### Job Complexity 5/5EasyHard ### Pace & Pressure 4/5RelaxedFast-paced ### Autonomy Level 4/5GuidedFull ownership ### Communication Load 4/5IndependentCollaborative AI insightThis is a senior technical security role spanning cloud architecture, infrastructure-as-code, data controls, vulnerability remediation, and incident response. It requires sound judgment in balancing security guardrails with engineering velocity across a distributed environment. ## Salary analysis Estimated compensation compared with the broader US market for similar roles. Estimated job median (per year)Market rate$217,700US market range (per year)$180k–$270k0$297k AI insightThe employer explicitly lists a yearly base-compensation range of $174,200–$261,200 USD, with a midpoint of $217,700. Estimated US annual market compensation for a senior infrastructure security engineer is $180,000–$270,000 USD; this is an AI estimate and not verified salary research. ## Core skills Skills and capabilities most closely associated with this opportunity. [Cloud security](https://jobicy.com/jobs?search_keywords=Cloud%20security.md)[AWS](https://jobicy.com/jobs?search_keywords=AWS.md)[Terraform](https://jobicy.com/jobs?search_keywords=Terraform.md)[Kubernetes security](https://jobicy.com/jobs?search_keywords=Kubernetes%20security.md)[Infrastructure as Code](https://jobicy.com/jobs?search_keywords=Infrastructure%20as%20Code.md)[Vulnerability management](https://jobicy.com/jobs?search_keywords=Vulnerability%20management.md)[CSPM](https://jobicy.com/jobs?search_keywords=CSPM.md)[Incident response](https://jobicy.com/jobs?search_keywords=Incident%20response.md)[Data governance](https://jobicy.com/jobs?search_keywords=Data%20governance.md)[CI/CD security](https://jobicy.com/jobs?search_keywords=CICD%20security.md)[Least privilege](https://jobicy.com/jobs?search_keywords=Least%20privilege.md)[Identity and access management](https://jobicy.com/jobs?search_keywords=Identity%20and%20access%20management.md)[Python](https://jobicy.com/jobs?search_keywords=Python.md)[Security automation](https://jobicy.com/jobs?search_keywords=Security%20automation.md)[SOC 2 compliance](https://jobicy.com/jobs?search_keywords=SOC%202%20compliance.md) Sample interview questionsHow would you improve the security posture of a large Terraform codebase used by multiple engineering teams?I would begin with an inventory of modules, state-management practices, privileged resources, and recurring misconfigurations. I would introduce reusable secure-by-default modules, policy-as-code checks in pull requests, automated drift and exposure detection, and a remediation process with clear ownership. I would measure adoption and risk reduction while partnering with developers to keep the paved path practical. Describe your approach to triaging a critical cloud vulnerability or misconfiguration. I first validate the finding, identify affected assets and data exposure, and assess exploitability, privilege level, and business impact. I prioritize containment for active or externally exposed risk, coordinate remediation with the owning team, and document a clear timeline and communication plan. After resolution, I add preventive controls or detections so the issue is less likely to recur. How would you implement least-privilege access for engineers working in AWS? I would define role-based access aligned to job functions, favor short-lived federated credentials, and separate production access from routine development workflows. Access would be granted through reviewed, auditable workflows with just-in-time elevation for exceptional needs. I would regularly review permissions, monitor sensitive actions, and replace broad permissions with scoped roles and automation. What security controls would you prioritize for CI/CD pipelines? I would prioritize protected branches, mandatory code review, scoped and short-lived pipeline credentials, signed artifacts, dependency and secret scanning, and restrictions on who can publish or deploy. I would also ensure environment separation, auditable deployment logs, and policy checks that prevent insecure infrastructure changes from reaching production. Controls should be automated and integrated early so they support rather than slow delivery. How do you communicate security recommendations effectively in a distributed engineering organization? I communicate recommendations with clear context: the risk, affected systems, practical remediation options, ownership, and expected timeline. I use concise asynchronous documentation and make space for technical discussion so teams can explain constraints. When trade-offs are necessary, I focus on agreed risk levels and measurable outcomes rather than prescribing controls without collaboration. Opportunity details ## About this role. ### AI at Zapier At [Zapier](https://zapier.com/about), we build and use automation every day to make work more efficient, creative, and human. So if you’re using AI tools while applying here – that’s great! We just ask that you use them responsibly and transparently. Check out our guidance on [How to Collaborate with AI During Zapier’s Hiring Process](https://zapier.com/l/jobs/ai-at-zapier), including how to use AI tools like ChatGPT, Claude, Gemini, or others during our hiring process – and when not to. Location: NAMER/EMEA ### Role Overview Zapier is on a mission to democratize automation while protecting the security and privacy of millions of users worldwide. We safeguard sensitive data and build trust through robust security measures that enable our teams to move fast, safely. We’re looking for a Senior Infrastructure Security Engineer to help maintain and raise the security bar across our production environments. In this role, you’ll contribute to designing and operating secure infrastructure, collaborating closely with senior engineers while taking ownership of well-defined initiatives. This role is ideal for someone with a strong infrastructure security foundation who’s ready to grow in a high-impact, remote-first environment. ### About You * You know how to secure the cloud: You have hands-on experience securing SaaS products and maintaining compliance with frameworks like SOC2,HIPAA/HITRUST, AWS FTR, or ISO 27001 * You have an understanding of modern cloud technology components and deployment patterns: Proficient with Infrastructure-as-Code (Terraform, CloudFormation), AWS, Kubernetes, and Python, Go or JavaScript. Experience with security tools like a CSPM (Wiz), vulnerability scanners, and lifecycle management solutions. * You take data governance infrastructure seriously: Whether it’s via database column tagging, leveraging inline data sanitization, or some combination, you’re familiar with securing data as it moves betweens systems. * Security Mindset: You understand modern deployment patterns (isolated VMs, k8s, serverless) and can identify and mitigate common cloud security risks. * Collaborative Approach: You work well with senior engineers, platform teams, and other security specialists, and you’re comfortable asking questions, reviewing code & design, sharing ideas, and learning from others. * Remote-Ready: You excel in asynchronous communication and self-manage effectively in a fully remote, distributed team. * Adaptable: You’ve experienced the fast pace of a growing company and can adjust processes and tools to fit evolving needs. ### What You’ll Do * Identify & Mitigate Risks: Spot and address security gaps in infrastructure to improve resilience and reduce risk. * Harden Infrastructure: Apply secure-by-default designs across data, endpoints, tools, and processes. * Build Scalable Processes: Collaborate on paved-path tooling and processes that enforce least-privilege access while enabling engineering velocity. * Develop & Audit IaC: Improve Terraform configurations for security, scalability, and reliability. * Triage Fleet Security Posture: Operate and maintain tools that detect and track misconfigurations and vulnerabilities; ensure timely patching and mitigation. * Collaborate Across Teams: Partner with Platform, Engineering, and other Security teams to provide guidance and ad hoc support. * Incident handling: Active understanding and exercise of incident handling execution (detect, contain, remediate, prevent) with systems-level thinking and ability to separate noise from signals. ### What We’re Working On * Data Governance: Working with our data engineering team to improve data access controls. * CI/CD Security: Improving CI least-privilege access, branch protections, and publishing controls. * Security Automation: Expanding automated guardrails for developers to ship securely and quickly. * Secure Access: Building paths that enable our engineers to interface with the cloud while enforcing least-privilege and audited access. * Kubernetes Image Hardening & IaC Standardization: Creating and deploying consistent, secure Docker images and Terraform modules. ### Why You’ll Love This Role You’ll join a collaborative, mission-driven security team where your work directly protects millions of users. You’ll have the autonomy to drive improvements while learning from seasoned security professionals, and you’ll do it all in a remote-first, flexible environment that values results over hours logged. ### How to Apply At Zapier, we believe that diverse perspectives and experiences make us better, which is why we have a non-standard application process designed to promote inclusion and equity. We’re looking for the best fit for each of our roles, regardless of the type of companies in your background, so we encourage you to apply even if your skills and experiences don’t exactly match the job description. All we ask is that you answer a few in-depth questions in our application that would typically be asked at the start of an interview process. This helps speed things up by letting us get to know you and your skillset a bit better right out of the gate. Please be sure to answer each question; the resume and CV fields are optional. Education is not a requirement for our roles; however, if you receive an offer, you will need to include your most recent educational experience as part of our background check process. After you apply, you are going to hear back from us—even if we don’t see an immediate fit with our team. In fact, throughout the process, we strive to never go more than seven days without letting you know the status of your application. We know we’ll make mistakes from time to time, so if you ever have questions about where you stand or about the process, just ask your recruiter! Zapier is an equal-opportunity employer and we’re excited to work with talented and empathetic people of all identities. Zapier does not discriminate based on someone’s identity in any aspect of hiring or employment as required by law and in line with our commitment to Diversity, Inclusion, Belonging and Equity. Our [code of conduct](https://zapier.com/jobs/zapier-code-of-conduct) provides a beacon for the kind of company we strive to be, and we celebrate our differences because those differences are what allow us to make a product that serves a global user base. Zapier will consider all qualified applicants, including those with criminal histories, consistent with applicable laws. Zapier prioritizes the security of our customers’ information and is dedicated to adhering to all applicable data privacy laws. You can [review our privacy policy here](https://zapier.com/legal/data-privacy). Zapier is committed to inclusion. As part of this commitment, Zapier welcomes applications from individuals with disabilities and will work to provide reasonable accommodations. If reasonable accommodations are needed to participate in the job application or interview process, please contact [jobs@zapier.com](mailto:jobs@zapier.com). ### Application Deadline: The anticipated application window is 30 days from the date job is posted, unless the number of applicants requires it to close sooner or later, or if the position is filled. Even though we’re an all-remote company, we still need to be thoughtful about where we have Zapiens working. Check out[this resource](https://docs.google.com/spreadsheets/d/1_lXQvKwuU4xXEbye7EW_En8iv1ZIMlQNmT7B2Mzbo24/edit?gid=0#gid=0) for a list of countries where we currently cannot have Zapiens permanently working. Show more [Apply now >](https://jobicy.com/jobs/156567-sr-engineer-infrastructure-security.md) * ![Upload CV](data:image/svg+xml;base64,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) ### Upload your resume now To unlock remote work opportunities and be discovered by global employers. This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content. Next step ## Apply now. Follow the employer’s application method and review Jobicy’s safety guidance before sharing personal information. Keep exploring ## Related remote jobs. * ![Nebius logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/06/d90c0566-221.webp) Nebius Oct 23 New ### [Security Solutions Engineer](https://jobicy.com/jobs/156529-security-solutions-engineer.md) About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from… * ![Fastly logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/10/127f9e4bbbdb8767bef358a23bf7f73d.jpeg) Fastly Oct 23 New ### [Threat Detection Analyst (Japanese & English speaking)](https://jobicy.com/jobs/153871-threat-detection-analyst-japanese-english-speaking.md) Fastly helps people stay better connected with the things they love. Fastly’s edge cloud platform enables customers to create great digital experiences quickly, securely, and reliably by processing, serving, and… * ![Goodleap logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/482c4fb7-221.png) Goodleap Oct 23 New ### [Senior Security Engineer, Product Security](https://jobicy.com/jobs/153887-senior-security-engineer-product-security.md) About GoodLeap: GoodLeap is a technology company delivering best-in-class financing and software products for sustainable solutions, from solar panels and batteries to energy-efficient HVAC, heat pumps, roofing, windows, and more…. * ![Phantom logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/08/3d0a3a49-221.png) Phantom Oct 23 New ### [Staff Product Security Engineer (Security)](https://jobicy.com/jobs/153861-staff-product-security-engineer-security.md) Phantom is on a mission to connect the world to the freedom of open markets. Tens of millions of people all over the world use Phantom to access global markets… * ![Nebius logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/06/d90c0566-221.webp) Nebius Oct 22 New ### [Offensive Security Engineer](https://jobicy.com/jobs/156386-offensive-security-engineer-2.md) About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from… * ![Nebius logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/06/d90c0566-221.webp) Nebius Oct 22 New ### [Network Security Engineer](https://jobicy.com/jobs/156385-network-security-engineer.md) About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from… * ![TRM Labs logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/34aa038c-221.png) TRM Labs Oct 22 New ### [Global Investigator (Triage)](https://jobicy.com/jobs/156364-global-investigator-triage.md) Build a Safer World. TRM Labs provides AI-powered intelligence solutions that help public and private sector agencies investigate and disrupt crime. TRM’s platforms enable investigators to trace illicit activity, build… * ![Semperis logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/01cb24ea-221.png) Semperis Oct 22 New ### [Associate Vice President, Pre-Sales, EMEA](https://jobicy.com/jobs/156352-associate-vice-president-pre-sales-emea.md) At Semperis, our mission is to be a Force for Good. Starting with being a great place to work. We believe that when people feel valued, supported, and empowered, they… * ![EverAI logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/91735b0b-221.png) EverAI Oct 22 New ### [Security Engineer (Full Remote – Austria)](https://jobicy.com/jobs/156295-security-engineer-full-remote-austria.md) Our Vision & Products 🚀 EverAI — Building the Future of AI Companionship One of the Top 15 Largest & Fastest-Growing AI Companies in the World 50 Million Users in… * ![EverAI logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/91735b0b-221.png) EverAI Oct 22 New ### [Security Engineer (Full Remote – Germany)](https://jobicy.com/jobs/156292-security-engineer-full-remote-germany.md) Our Vision & Products 🚀 EverAI — Building the Future of AI Companionship One of the Top 15 Largest & Fastest-Growing AI Companies in the World 50 Million Users in… [Browse all jobs](https://jobicy.com/jobs.md)