Senior Security Engineer I

Zip Co Limited
United States
Remote

Who this role is best for

A natural match if you have experience in cloud-native security with Azure and GCP, particularly in regulated environments.

Best fit for

  • Candidates with 7+ years in cloud infrastructure security, especially in regulated sectors like fintech
    — “7+ years of experience in security engineering or cloud infrastructure security, ideally in regulated or high-trust environments”
  • Individuals who have implemented AI-assisted security solutions and automated workflows
    — “Demonstrated use of AI to improve security workflows”
  • Professionals with strong cross-functional collaboration skills and ability to influence non-reporting teams
    — “Proven ability to work across disciplines and influence without authority”

Things to consider

  • No visa sponsorship available, so only US citizens or those with valid work authorization can apply
    — “visa sponsorship is not available for this position”
  • The role allows remote work but offers in-person options in Manhattan
    — “Remote-first opportunity for US-based employees with the option to work in-person out of our Manhattan office”

How to stand out

  • Highlight experience with Azure-native security tools and AI integration in your resume and interview responses
    — “Hands-on experience with Azure-native security controls (e.g., Microsoft Defender for Cloud, Azure Policy, Sentinel)”
  • Emphasize your background in threat modeling and risk analysis frameworks like STRIDE and MITRE ATT&CK
    — “Deep familiarity with threat modeling, security architecture, and risk analysis methodologies (e.g., STRIDE, MITRE ATT&CK)”
  • Showcase your ability to translate complex security concepts into business-relevant language
    — “able to articulate complex risks in business terms and influence decision-making”
  • Demonstrate prior work in automating secure deployment pipelines and infrastructure-as-code
    — “Automate manual security processes and build scalable, AI-assisted security workflows”
  • Include examples of how you have secured AI tool adoption and managed emerging risks
    — “Secure the adoption of AI tools and services by evaluating emerging risks and implementing appropriate safeguards”
Pace · Fast PacedCollaboration · HighAutonomy · HighDecision Impact · Team

Derived from job-description analysis by Serendipath's career intelligence engine.

What success looks like

  • Implementing secure configurations
  • Improving vulnerability detection
Typical background
BS or MS in Computer Science or related field7+ years of security engineering experience

Skills & requirements

Required

Cloud SecurityIAMNetwork SecurityApplication SecurityVulnerability ManagementAutomation

Preferred

AI In SecurityGCP Security

Stack & domain

AzureGCPIAMNetwork SecurityApplication SecurityAIAutomationThreat ModelingRisk AnalysisCollaborationProblem SolvingCommunicationInfluenceCisspCCSPOSCPGIACAz-500Cloud SecurityInfrastructure SecurityAI Security

About the role

Original posting from Zip Co Limited via Greenhouse

Implement and maintain cloud-native security controls across Zip’s Azure microservices, focusing on IAM, network, and application layers

Proactively identify and mitigate vulnerabilities in collaboration with engineering and infrastructure teams

Remote-first opportunity for US-based employees with the option to work in-person out of our Manhattan office.

Start your adventure with Zip 

Join Zip’s Engineering function and put your name to solving fascinating challenges at scale in an agile, test-driven development environment. If you value good domain-driven design and enjoy delivering quality work at pace, you’ll be a great fit with the squads responsible for building cloud-native software applications that serve millions of customers and process billions of dollars in payments. 

As a Senior Security Engineer, you will be responsible for implementing cloud security controls that ensure the trust and reliability of our Buy Now, Pay Later (BNPL) service. Your day to day work will span analyzing an Azure cloud-native, microservices environment for security control gaps and implementing secure configurations and solutions for network, IAM and application security. You will champion cross-functional collaboration across security and engineering teams and implement globally applicable controls wherever possible. 

You’ll work across teams—security, engineering, infrastructure, and data—to assess risks, implement AI-specific security controls, automate secure deployment pipelines, and guide the secure adoption of new AI tools and services.

Interesting problems you’ll get to solve

Design, implement, and maintain security controls across Azure and GCP cloud infrastructure, microservices, IAM, network, and application environments.

Leverage AI-powered tools and automation to improve vulnerability detection, risk prioritization, threat analysis, and remediation.

Automate manual security processes and build scalable, AI-assisted security workflows.

Collaborate with engineering and infrastructure teams to proactively identify security gaps, implement solutions, and drive risk reduction.

Secure the adoption of AI tools and services by evaluating emerging risks and implementing appropriate safeguards.

Monitor, triage, and remediate vulnerabilities identified through automated security scans and assessments.

Embed security into CI/CD pipelines, infrastructure-as-code, and engineering workflows through secure-by-default practices.

Continuously improve security capabilities through emerging technologies, intelligent automation, and modern engineering practices.

What you’ll bring to the team 

BS or MS in Computer Science, Information Security, or a related technical field; additional credentials in cloud security, offensive security, or risk management are highly valued

Security certifications strongly preferred, such as CISSP, CCSP, OSCP, GIAC, or AZ-500

7+ years of experience in security engineering or cloud infrastructure security, ideally in regulated or high-trust environments (e.g., fintech, healthcare, critical infrastructure)

Hands-on experience with Azure-native security controls (e.g., Microsoft Defender for Cloud, Azure Policy, Sentinel), container security, secrets management, and SSO/IAM integrations

Proven ability to work across disciplines and influence without authority, comfortable interfacing with Engineering, Legal, Product, and Audit functions

Deep familiarity with threat modeling, security architecture, and risk analysis methodologies (e.g., STRIDE, MITRE ATT&CK)

Strong written and verbal communication skills, able to articulate complex risks in business terms and influence decision-making

Demonstrated use of AI to improve security workflows; you don’t just use security tools, you build smarter ways to manage risk

What you’ll get in return

Zip is a place where you’ll get out what you put in. The newness of our sector means we need to move at pace and embrace change, and our promise to you when you join the team is that you’ll feel empowered and trusted to make big things happen quickly. 

We want you to feel welcome and as though you have the support to be yourself, and care for yourself at work. Because it’s important to us that you make the most of the opportunities you’ll get to grow your skills and your career, and be surrounded by smart, friendly people and leaders that have your back.

We think these are just some of the best things about being a Zipster. We will also offer you:

Flexible working culture

Incentive programs

Unlimited PTO

Generous paid parental leave

Leading family support policies

Company-sponsored 401k match

Learning and wellness subscription stipend

Beautiful Union Square office with a casual dress code

Industry-leading, employer-sponsored insurance for you and your dependents, with several 100% Zip-covered choices available

Zip is committed to a straightforward and transparent pay structure. The actual base salary will be determined by various individualized factors, including job-related knowledge, skills, experience, location, internal equity, as well as other objective business considerations.

The annual base Pay Range for this position is $122,000-$150,000 This range reflects our US national compensation band (USN). Additional premium percentages may apply based on our tiered premium strategy.

Subject to those same considerations, the total compensation package for this position may also include other elements, including a bonus and/or commission awards, in addition to a full range of medical, financial, and/or other benefits. 

*Please note that visa sponsorship is not available for this position.

If hired, employees will be in an 'at-will position' and the Company reserves the right to modify base salary (as well as any other discretionary payment or compensation or benefit program) at any time, including for reasons related to individual performance, Company or individual department/team performance, and market factors.

Be a part of a team that reflects the diversity of our customers

We pride ourselves on being a workplace that provides equal opportunities to people of all ages, cultural backgrounds, sexual orientations, gender identities, abilities, veteran status, and everything else that makes you unique.

Equally, we’re committed to ensuring our recruitment processes are accessible and inclusive. Please let us know If there are any adjustments that need to be made to ensure you have a fair and equitable experience.

And finally…get to know us

Zip Co Limited (ASX: ZIP) is a digital financial services company, offering innovative, people-centered products. Operating in two core markets - Australia and New Zealand (ANZ) and the US, Zip offers access to point-of-sale credit and digital payment services, connecting millions of customers with its global network of tens of thousands of merchants. We’re proud to be a values-led business and our values - Customer First, Own it, Stronger Together and Change the Game - guide us in everything we do.

I acknowledge by clicking "Submit Application", that the information provided is true and correct. I also understand that any willful dishonesty may render for refusal of this application or immediate termination of employment. By providing your information, you acknowledge that you have read our Zip Applicant and Candidate Privacy Notice and authorize Zip to process your data subject to those terms. Zip participates in the federal government’s E-Verify program. #LI-Remote

Before you apply, give Zip a try   -> rebrand.ly/check-zip-out

Source: Zip Co Limited careers (Greenhouse)

Similar roles

More roles at Zip Co