Talent.com
Senior Software Engineer, Product Security

Senior Software Engineer, Product Security

ZipHQ, Inc.San Francisco, CA, United States
job_description.job_card.variable_days_ago
serp_jobs.job_preview.job_type
  • serp_jobs.job_card.full_time
job_description.job_card.job_description

The simple task of buying software, services, or tools at work has become hopelessly complicated at even the most innovative companies in the world. Today, enterprises spend $120T+ per year globally (>

30 times larger than annual consumer e-commerce spend) and rely on vendors more than ever before to run their businesses.

Our cofounders started Zip in 2020 to address this seemingly intractable problem with a purpose-built procurement platform that provides a simple, consumer-grade user experience. Within the last 4 years, Zip has created a new category and developed the leading solution in this $50B+ TAM space. Today, the world’s leading companies like OpenAI, Snowflake, Anthropic, Coinbase, and Prudential rely on Zip to manage billions of dollars in spend.

We have a world-class team coming from category-defining companies like Airbnb, Meta, Stripe, Salesforce, Apple, and Google. With a $2.2 billion valuation and $370 million in funding from Y Combinator, Tiger Global, BOND, DST Global, and CRV, we’re focused on developing cutting-edge technology, expanding into new global markets, and—above all–driving incredible value for our customers. Join us!

Your Role

The Security team at Zip is committed to maintaining the security and confidentiality of our customers’ data. As a Senior Security Software Engineer, you’ll take on a dynamic role, designing and building across domains, from customer-facing security features to infrastructure safeguards. We move quickly to solve a wide range of complex technical and product challenges. While we are an experienced team that can provide constant guidance and mentorship, we value engineers who can autonomously scope and solve complex technical challenges.

You will

  • Develop customer-facing security features, such as account takeover detection systems, universal audit trails, and IP allowlisting, to improve the security capabilities of Zip’s products.
  • Design and implement defensive measures to detect and prevent breaches in Zip’s production infrastructure
  • Build processes and tooling to enable developers to ship features securely
  • Participate in security reviews, threat modeling, table-top exercises, and bug bounty triage
  • Lead response to incidents, perform investigations, and communicate clearly to internal and external stakeholders

Qualifications

  • Minimum 4+ years of experience in a security or software engineering role. This role requires software development experience.
  • Experience in enterprise SaaS and / or fintech is preferred
  • Experience with cloud technologies, such as AWS, Kubernetes, and Infrastructure as Code
  • An understanding of security best practices and frameworks such as the OWASP Top 10, NIST CSF, and SLSA
  • Exposure to compliance and regulatory frameworks such as SOC 2, ISO 27001, and GDPR
  • The salary range for this role is $150,000 - $210,000. The salary for this position is determined based on a variety of job-related factors that may include location, relevant experience, education, or particular skills and expertise.

    Perks & Benefits

    At Zip, we’re committed to providing our employees with everything they need to do their best work.

  • Start-up equity
  • Full health, vision & dental coverage
  • ️ Catered lunches & dinners for SF employees
  • Commuter benefit
  • Team building events & happy hours
  • Flexible PTO
  • Apple equipment plus home office budget
  • 401k plan
  • We\'re looking to hire Zipsters and that means hiring people who take ownership, communicate openly, have an underdog mindset, and are excited to increase the pace of innovation for every business in the world. We encourage all candidates to apply even if your experience doesn\'t exactly match up to our job description. We are committed to building a diverse and inclusive workspace where everyone (regardless of age, religion, ethnicity, gender, sexual orientation, and more) feels like they belong. We look forward to hearing from you!

    #J-18808-Ljbffr

    serp_jobs.job_alerts.create_a_job

    Senior Software Engineer • San Francisco, CA, United States

    Job_description.internal_linking.related_jobs
    • serp_jobs.job_card.promoted
    • serp_jobs.job_card.new
    CISSP Security Architect

    CISSP Security Architect

    VirtualVocationsSan Jose, California, United States
    serp_jobs.job_card.full_time
    A company is looking for a MeF Security Architect to lead security architecture and serve as the key point of contact for security-related decisions. Key Responsibilities Develop and extend MeF se...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_variable_hours
    • serp_jobs.job_card.promoted
    • serp_jobs.job_card.new
    Workday Security Architect

    Workday Security Architect

    VirtualVocationsConcord, California, United States
    serp_jobs.job_card.full_time
    A company is looking for a Workday Security Architect to lead the redesign and optimization of a large enterprise Workday security environment. Key Responsibilities Lead design sessions with stake...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_variable_hours
    • serp_jobs.job_card.promoted
    • serp_jobs.job_card.new
    Security GRC Analyst

    Security GRC Analyst

    VirtualVocationsConcord, California, United States
    serp_jobs.job_card.full_time
    A company is looking for a Security GRC Analyst.Key Responsibilities Lead the strategy, execution, and improvement of the compliance program, including assessments and policy documentation Devel...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_variable_hours
    • serp_jobs.job_card.promoted
    • serp_jobs.job_card.new
    Security Analyst Consultant

    Security Analyst Consultant

    VirtualVocationsConcord, California, United States
    serp_jobs.job_card.full_time
    A company is looking for a Security Analyst - Consultant.Key Responsibilities Champion DevSecOps through security automation by designing, implementing, and maintaining security tools Monitor an...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_variable_hours
    • serp_jobs.job_card.promoted
    Network Firewall Engineer

    Network Firewall Engineer

    VirtualVocationsConcord, California, United States
    serp_jobs.job_card.full_time
    A company is looking for a Network Operations Firewall Engineer.Key Responsibilities Monitor, manage, and support enterprise firewalls and security appliances Implement firewall rule changes, NA...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_1_day
    • serp_jobs.job_card.promoted
    Cybersecurity Program Analyst

    Cybersecurity Program Analyst

    VirtualVocationsFremont, California, United States
    serp_jobs.job_card.full_time
    A company is looking for a Cyber Program Maturity Analyst Sr Principal.Key Responsibilities Strengthen EPA's Information Security and Privacy Posture by streamlining cybersecurity procedures and ...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_30
    • serp_jobs.job_card.promoted
    Palo Alto Firewall Engineer

    Palo Alto Firewall Engineer

    VirtualVocationsFremont, California, United States
    serp_jobs.job_card.full_time
    A company is looking for a Firewall Engineer - Palo Alto SME.Key Responsibilities Lead the design, deployment, and optimization of Palo Alto firewall solutions Serve as the primary SME for Panor...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_30
    • serp_jobs.job_card.promoted
    Principal Cybersecurity Engineer

    Principal Cybersecurity Engineer

    VirtualVocationsHayward, California, United States
    serp_jobs.job_card.full_time
    A company is looking for a Principal Cybersecurity Engineer - Battery Storage.Key Responsibilities Drive the cybersecurity program and activities, aligning with compliance and security postures ...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_30
    • serp_jobs.job_card.promoted
    Cybersecurity Analyst / Information Systems Security Officer (ISSO)

    Cybersecurity Analyst / Information Systems Security Officer (ISSO)

    SRI InternationalMenlo Park, CA, United States
    serp_jobs.job_card.full_time
    Cybersecurity Analyst / Information Systems Security Officer (ISSO).SRI is seeking a Cybersecurity Analyst / Information Systems Security Officer (ISSO) to join our IA team in supporting SRI's Menlo Pa...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_30
    • serp_jobs.job_card.promoted
    • serp_jobs.job_card.new
    Cybersecurity Analyst II

    Cybersecurity Analyst II

    VirtualVocationsFremont, California, United States
    serp_jobs.job_card.full_time
    A company is looking for a Cybersecurity Analyst II to handle security alerts, incident response, and threat investigations. Key Responsibilities Monitor and triage alerts from various security to...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_variable_hours
    • serp_jobs.job_card.promoted
    Software Security Engineer

    Software Security Engineer

    VirtualVocationsConcord, California, United States
    serp_jobs.job_card.full_time
    A company is looking for a Software Security Engineer, Experienced or Senior (Virtual).Key Responsibilities Operationalize the open-source policy and process through automation Independently inv...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_1_day
    • serp_jobs.job_card.promoted
    Attack Surface Management Security Architect 1444153

    Attack Surface Management Security Architect 1444153

    Cisco Systems, Inc.San Jose, CA, United States
    serp_jobs.job_card.permanent
    The application window is expected to close on : October 18, 2025.Job posting may be removed earlier if the position is filled or if a sufficient number of applications are received.The successful a...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_1_day
    • serp_jobs.job_card.promoted
    Principal Cyber Security Engineer

    Principal Cyber Security Engineer

    Cloud Software Group, Inc.San Ramon, CA, United States
    serp_jobs.job_card.full_time
    Architectural Leadership : Design, develop, and maintain the comprehensive security architecture for Cloud Software Group's products and corporate infrastructure. Cloud Security Expertise : Lead the s...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_30
    • serp_jobs.job_card.promoted
    SAP Application Security Engineer

    SAP Application Security Engineer

    VirtualVocationsConcord, California, United States
    serp_jobs.job_card.full_time +1
    A company is looking for an Application Security Engineer with expertise in SAP systems for a short-term contract.Key Responsibilities Assess and strengthen security configurations within SAP ABA...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_1_day
    • serp_jobs.job_card.promoted
    Senior IT Security Engineer

    Senior IT Security Engineer

    VirtualVocationsSan Jose, California, United States
    serp_jobs.job_card.full_time
    A company is looking for a Senior IT Security Operations Engineer.Key Responsibilities Monitor, detect, analyze, and respond to security events and incidents using various security tools Conduct...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_30
    • serp_jobs.job_card.promoted
    Senior Cyber Security Engineer

    Senior Cyber Security Engineer

    Cloud Software Group, Inc.San Ramon, CA, United States
    serp_jobs.job_card.full_time
    Analyze and investigate activity on company devices and infrastructure (Public Cloud & on-premise) that could represent a security threat. Work cross-functionally with the Security teams to develop ...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_30
    • serp_jobs.job_card.promoted
    • serp_jobs.job_card.new
    Azure Security Administrator

    Azure Security Administrator

    VirtualVocationsHayward, California, United States
    serp_jobs.job_card.full_time
    A company is looking for an Azure Systems Administrator - Security.Key Responsibilities Implement and manage Azure security controls and identity governance Ensure compliance with security stand...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_variable_hours
    • serp_jobs.job_card.promoted
    • serp_jobs.job_card.new
    Cyber Security Engineer / ISSO

    Cyber Security Engineer / ISSO

    VirtualVocationsConcord, California, United States
    serp_jobs.job_card.full_time
    A company is looking for a Cyber Security Engineer / ISSO.Key Responsibilities Perform day-to-day information assurance and system administration duties for Space Force systems Implement and maint...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_variable_hours
    • serp_jobs.job_card.promoted
    Security DevOps Engineer

    Security DevOps Engineer

    VirtualVocationsConcord, California, United States
    serp_jobs.job_card.full_time
    A company is looking for a Security DevOps Engineer with expertise in Azure security and compliance.Key Responsibilities Identify and remediate security vulnerabilities in Azure workloads and dev...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_1_day
    • serp_jobs.job_card.promoted
    • serp_jobs.job_card.new
    Senior Corporate Security Engineer

    Senior Corporate Security Engineer

    VirtualVocationsHayward, California, United States
    serp_jobs.job_card.full_time
    A company is looking for a Senior Corporate Security Engineer to enhance enterprise security operations.Key Responsibilities Manage and optimize Sumo Logic SIEM for threat detection and investiga...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_variable_hours