Senior Security Engineer

Das ist der Job

About Zip Zip is the AI platform for enterprise procurement — built for humans and agents working together.

Darum lohnt es sich

By orchestrating procurement across teams, tools, and suppliers with the help of AI agents, companies can secure the resources they need to innovate faster than ever before. Zip’s team includes product leaders from Apple, Airbnb, and Meta, as well as former procurement leaders from United Health, Sanofi, MGM Resorts, Discover, and NASA.

You will autonomously scope and solve complex technical challenges while receiving guidance and mentorship from an experienced team. The world’s most influential enterprises trust Zip, including T‑Mobile, OpenAI, AMD, Mars, Dollar Tree, and more. Together they’ve saved over $8billion and processed over $500billion in spend.

Backed by Adams Street, Alkeon, BOND, CRV, DST, Tiger Global, and Y Combinator, Zip has raised $371million, most recently at a $2.2billion valuation and has been recognized by Forbes Fintech50, Fast Company’s Most Innovative Companies, Inc. Best in Business, and LinkedIn Top Startups.

Application Security Engineer As our first Application Security Engineer, you will lead efforts to build foundational security guardrails, launch key security initiatives, and solidify trust customers place in us.

Your contributions will be pivotal to the success of Zip’s rapid growth as we launch new products, such as AI Agents and an App Marketplace, and enter new markets, including EMEA and the federal government space. Responsibilities Design and implement technical controls to eliminate or mitigate classes of security vulnerabilities.

Support secure product development through design reviews, threat models, static/dynamic scans, and hands‑on security assessments. Validate, triage, and coordinate security findings from bug bounty and third‑party pentests. Mentor security analysts and security champions on best practices and techniques.

Qualifications Experience writing production‑quality code for security tooling and services. Strong written and verbal communication with internal and external stakeholders. A solid understanding of security risks and the ability to balance security with business requirements. Experience with web applications, APIs, and cloud environments.

At Zip, our stack includes Python, React, GraphQL, Kubernetes, and AWS. Nice to haves Familiarity with compliance frameworks such as SOC2, ISO27001, and FedRAMP. Hands‑on experience in offensive security (e.g., through bug bounty programs or CTFs). Salary : $160,000 – $220,000.

The salary for this position is determined based on a variety of job‑related factors that may include location, relevant experience, and more. #J-18808-Ljbffr