Senior Security Engineer

About the Company

Zip is the AI platform for enterprise procurement, designed to orchestrate procurement across teams, tools, and suppliers using AI agents. Backed by major investors like Y Combinator and Tiger Global, Zip has reached a $2.2 billion valuation and serves influential enterprises like OpenAI and T-Mobile.

Responsibilities

• Design, harden, and operate Zip's AWS architecture, including multi-account structure, VPC networking, IAM, and KMS
• Build and maintain golden images and a patch management program across EC2, containers, and Kubernetes nodes
• Codify security into infrastructure as code and CI/CD pipelines through secure baselines and policy-as-code
• Lead cloud security initiatives spanning workload identity, secrets management, and vulnerability management
• Partner on secure design through architecture reviews and threat models
• Validate and triage security findings from bug bounty programs and third-party pentests
• Mentor security analysts and security champions on cloud security best practices

Requirements

• Hands-on experience designing and securing AWS environments (IAM, VPC, KMS)
• Experience writing production-quality code for security tooling and automation
• Proficiency with Python, Terraform, Kubernetes, and AWS
• Familiarity with container and Kubernetes security
• Strong written and verbal communication skills
• Ability to balance security with business requirements
• Must be a US citizen or permanent resident

Preferred Qualifications

• Familiarity with compliance frameworks such as SOC 2, ISO 27001, and ISO 42001
• Hands-on experience in offensive security, bug bounty programs, or CTFs

Benefits

• Startup equity
• 100% health, vision, and dental coverage options
• Catered breakfast, lunch, and dinner
• Flexible PTO
• ClassPass membership and monthly commuter benefit
• Home office stipend and phone/internet reimbursement
• Paid parental leave and fertility stipend
• 401k plan and unlimited AI token usage