AppSecEngineer, Zapier
$141.1-211.7k
+ Equity + Bonus. For Canadian employees: $141,100 – $211,700
More information about location
Workflow automation service
Open for applications
Workflow automation service
1001+ employees
Open for applications
$141.1-211.7k
+ Equity + Bonus. For Canadian employees: $141,100 – $211,700
More information about location
1001+ employees
Company mission
Zapier's mission is to Make Automation Work for Everyone!
Role
Who you are
- You have strong Python backend development expertise, and have experience building and maintaining production services
- You have hands-on experience with Redis and PostgreSQL, and proficiency with distributed systems and cloud platforms (AWS)
- You have a strong understanding of cryptographic principles. You have knowledge of authentication mechanisms, authentication / authorization patterns, and secure key management practices
- You have experience with security architecture and threat modeling. You have strong written and verbal communication skills to deliver constructive feedback regarding security matters to engineers and product designers, and an ability to balance security requirements with operational or business needs
- You understand secure development lifecycle and secure coding practices. You have knowledge of common web / API vulnerabilities and mitigations (e.g. OWASP Top 10). You think about your job as not just identifying individual vulnerabilities but also finding effective ways to eliminate whole classes of them
- Collaboration is second nature to you, and you're known for your willingness to roll up your sleeves and work alongside colleagues to achieve common goals
- You're adaptable. You've been in fast-growing companies and know how to build, change, and adapt to the needs of a company as it grows
What the job involves
- We’re looking for an Application Security (AppSec) Engineer to join our Security team at Zapier
- We’re on a mission to democratize automation, while ensuring the security and privacy of millions of users worldwide by protecting sensitive data and building trust through robust security measures
- This role combines hands-on software development for our core security services (60-70%) with security engineering responsibilities (30-40%)
- Shape security practices across development teams. And empower them to build and ship secure products
- Own critical security services protecting sensitive data at scale
- Security Services Development: Develop core security infrastructure services focusing on key management, encryption, and authentication. Build robust distributed systems leveraging Redis, PostgreSQL, and AWS services. Maintain high code quality standards through comprehensive testing, monitoring, and documentation. Design and operate scalable processes and build paved-path tooling that enable our engineers to ship secure products
- Security Threat Identification: Partner with development teams to conduct design reviews and threat modeling sessions
- Vulnerability Management: Support our public bug bounty program and leverage application testing tools (SAST, SCA) to identify, triage, and drive remediation of vulnerabilities
- Collaborative Security Support: Work closely with various other Security teams and partner with engineering teams to provide general ad hoc security support and technical/operational guidance
Application process
- Deadline to Apply: 30 May 2025 at 08:00 BST
Our take
Even before remote working became the "in thing", freelancers, small business owners, and large organisations have found themselves needing more and more software platforms to serve their operations needs. As people used more software services, Zapier founders saw the need to connect the actions between these softwares and save everyone some time.
Zapier is the largest integration and automation tool for businesses. Since being founded, Zapier has grown its suite of automation offerings across almost every mainstream software service. The company is one of the most successful to come out of Y Combinator, and has also been one of the pioneers of remote working.
Zapier has so far, been able to capitalise heavily on its advantage as first entrants and has had very little actual competition. Software services aren't going anywhere anytime soon and organisations are only going to need more of them. This puts Zapier in a strong place growth-wise but also opens up room for bolder companies to get in on the action. Companies like Airtable and Integromat are already preying on more niche segments of Zapier's market share.
Freddie
Company Specialist at Welcome to the Jungle
Insights
38% employee growth in 12 months
Company
Funding (1 round)
Oct 2012
$1.3m
SEED
Total funding: $1.3m
Company benefits
- Work from anywhere
- Bonus program
- Unlimited vacation policy
- Great healthcare + dental + vision coverage*
- Retirement plan with company match*
- Stock options for every Zapien**
- 2 annual company retreats to awesome places
- 14 weeks paid leave for new parents
- Home office setup stipend
- Professional development allowance
Additional info
- As a fully remote company with 800+ team members across 40+ states, 38 countries, and 18+ timezones, we’ve adopted a culture of asynchronous work. This work style allows teams to collaborate effectively across locations, time zones, skills, and each individual’s energy levels, and empowers employees to work in a setting that fits their needs. In practice, we live on Slack, with most conversations in public channels. It mimics the open-office feel and allows everyone to search the chat logs if they need to find something that happened when they weren’t around
Leadership
Wade Foster
(CEO & Co-Founder)Prior to co-founding Zapier, wasEmail Marketing Manager with Veterans United Home Loans, and Customer Development Lead at The Idea Works.
Bryan Helmig
(CTO & Co-Founder)Was previously Product Dev/Manager at Veterans United Home Loans.
Mike Knoop
(Co-Founder)Was CPO and Head of Labs at Zapier before becoming President. Previously was a Graduate Research at the University of Missouri.
Share this job
View 9 more jobs at Zapier