Zip

Zip

Zip is a leading global 'Buy Now, Pay Later' company that provides fair and seamless financial solutions. With a mission to be the first payment choice everywhere, Zip offers transparent, flexible, and interest-free credit to consumers, merchants, and ...

Banks
1001-5000
Founded 2013
$823M raised

Description

  • Design, implement, and maintain security controls across Azure and GCP infrastructure, microservices, IAM, network, and application layers.
  • Analyze cloud-native environments for security control gaps and implement secure configurations and solutions.
  • Identify, triage, and remediate vulnerabilities from automated scans and security assessments.
  • Collaborate with security, engineering, infrastructure, and data teams to assess risk and reduce security exposure.
  • Embed secure-by-default practices into CI/CD pipelines, infrastructure-as-code, and engineering workflows.
  • Automate manual security processes and develop scalable, AI-assisted security workflows.
  • Use AI-powered tools to improve vulnerability detection, risk prioritization, threat analysis, and remediation.
  • Evaluate risks associated with AI tools and services and implement appropriate security safeguards.
  • Apply threat modeling, security architecture, and risk analysis to improve security capabilities.

Requirements

  • BS or MS in Computer Science, Information Security, or a related technical field.
  • 7+ years of experience in security engineering or cloud infrastructure security, ideally in regulated or high-trust environments.
  • Hands-on experience with Azure-native security controls, including Microsoft Defender for Cloud, Azure Policy, and Sentinel.
  • Experience with container security, secrets management, and SSO/IAM integrations.
  • Deep familiarity with threat modeling, security architecture, and risk analysis methodologies such as STRIDE and MITRE ATT&CK.
  • Demonstrated ability to use AI to improve security workflows and risk management.
  • Ability to influence cross-functional stakeholders across Engineering, Legal, Product, and Audit.
  • Strong written and verbal communication skills, including communicating technical risk in business terms.
  • Cloud security, offensive security, or risk-management credentials are highly valued.
  • CISSP, CCSP, OSCP, GIAC, or AZ-500 certification is strongly preferred.
  • Must be US-based; visa sponsorship is not available.

Benefits

  • Annual base salary range of $122,000-$150,000, with potential location-based premiums.
  • Potential bonus and/or commission awards.
  • Flexible, remote-first work culture with access to a Manhattan Union Square office.
  • Unlimited PTO.
  • Generous paid parental leave and family-support policies.
  • Company-sponsored 401(k) match.
  • Learning and wellness subscription stipend.
  • Employer-sponsored insurance for employees and dependents, including 100% Zip-covered options.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Senior Security Engineer - AppSec (d/f/m)

vivenu 51-200 Media

As a Senior Security Engineer – AppSec at vivenu, you will build and scale the application security program for a global ticketing platform serving major live-entertainment brands.

Argo CD AWS Azure CI/CD Cybersecurity GCP GitHub GitOps Go Kubernetes Penetration Testing Terraform TypeScript
21 hours, 6 minutes ago

Member of Technical Staff, Security Engineering

Anchorage Digital 201-500 Capital Markets

Join Anchorage Digital’s Security team to build and strengthen cryptographic controls that protect institutional digital-asset infrastructure and customer assets.

C C++ Encryption Go Rust
21 hours, 6 minutes ago

Staff Security Engineer, Product Security

Flexport 1001-5000 Professional Services

Lead product security architecture at Flexport to make its global trade technology platform secure by default across products, services, and engineering teams.

Agile Burp Suite Go Java Kotlin Kubernetes OAuth Python Ruby SAML TypeScript
22 hours, 6 minutes ago

Security Engineer, Product Security

Flexport 1001-5000 Professional Services

Join Flexport as a Product Security Engineer to define secure-by-default architecture and strengthen product security across its global trade technology platform.

Agile AWS Azure Burp Suite GCP Java JavaScript Kotlin Python Ruby TypeScript
22 hours, 6 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers