Who we are:

From utilizing new SaaS tools to hiring expert consultants, modern companies rely on external vendors more than ever before. Yet companies still rely on legacy ERP systems, some built over a decade ago, to manage spend and compliance. That’s why we started Evergreen (YC S2020), the first modern spend management system. We provide one place for employees to request any purchase and manage approvals across finance, legal, security, procurement, and IT.

We are a small but mighty team that have helped scale category-defining companies like Airbnb, Facebook, Apple, and Salesforce. We’re building a world-class engineering team to create the next generation of enterprise spend management products.

Zip is tackling the $50B+TAM space to transform the way businesses manage spend. Our co-founders started Zip (YC S2020) because they saw the challenges companies had using outdated 20-year-old software to manage hundreds of millions of dollars in spend every year. We invented the world’s leading Intake-to-Procure solution to bring a consumer-grade user experience to B2B purchasing. And, we’re just getting started.

We're a fast-growing team that helped scale category-defining companies like Airbnb, Facebook, Salesforce, Apple, Quora, Pinterest, and Square. With $180 million in funding from YC Continuity (Y Combinator), CRV and Tiger Global, we're valued at $1.5 billion in just 3 years. In today's economic climate, the value we offer our customers is more critical than ever and our business is accelerating. We're growing quickly and need your help!

Your Role

The Security team at Zip is committed to maintaining the security and confidentiality of our customer’s data. As a Senior Cloud Security Engineer, you’ll take on a dynamic role, designing and implementing defensive measures across our production and corporate infrastructure. We move quickly to solve a wide range of complex technical and product challenges. While we are an experienced team that can provide constant guidance and mentorship, we value engineers who can autonomously scope and solve difficult technical challenges.

You Will

• Implement and administer tooling across cloud infrastructure (CSPM, SIEM)
• Build and manage secure SDLC programs, including design reviews, SCA, vulnerability management, and SAST/DAST
• Create and maintain threat models for Zip’s product, production infrastructure, and enterprise systems
• Drive adoption of security processes to guide security best practices across product development
• Participate in incident response, red team exercises, and bug bounty triage

Qualifications

• 4+ years of experience in a cloud security engineering role
• Experience in scalable cloud technologies, such as AWS, Kubernetes, IaC, and CI/CD
• Experience working in enterprise SaaS, preferably with experience in fintech
• An understanding of security best practices and frameworks, such as the OWASP Top 10, NIST CSF, SLSA framework
• Exposure to compliance and regulatory frameworks such as SOC 2, ISO 27001, GDPR, and CCPA

The salary range for this role is $150,000 - $200,000. The salary for this position is determined based on a variety of job-related factors that may include location, relevant experience, education, or particular skills and expertise.

Perks & Benefits

At Zip, we’re committed to providing our employees with everything they need to do their best work.

• 📈 Start-up equity
• 🦷 Full health, vision & dental coverage
• 🍽️ Catered lunches & dinners for SF employees
• 🚍 Commuter benefit
• 🚠 Team building events & happy hours
• 🌴 Flexible PTO
• 💻 Apple equipment plus home office budget
• 💸 401k plan

We're looking to hire Zipsters and that means hiring people who take ownership, communicate openly, have an underdog mindset, and are excited to increase the pace of innovation for every business in the world. We encourage all candidates to apply even if your experience doesn't exactly match up to our job description. We are committed to building a diverse and inclusive workspace where everyone (regardless of age, religion, ethnicity, gender, sexual orientation, and more) feels like they belong. We look forward to hearing from you!

We’re growing quickly and need your help:

We launched in early 2020 and are growing by 40% every month. We have a wide product surface area, covering request management, no code workflow builders, customer-facing reporting dashboards, connections to ticketing systems, integrations with financial systems, and more.

As a software engineer you will be responsible for building Evergreen’s core products and architecture. You will ship features that will be immediately used by our users, and will work with a tight-knit team that values open communication and cross-functional collaboration. We move quickly to solve a wide range of complex technical and product challenges. While we are an experienced team that can provide constant guidance and mentorship, we value engineers who can autonomously scope and solve difficult technical challenges.

Our product is built on Python, React, GraphQL, MySQL, and ElasticSearch. Our build-test-deploy stack includes Kubernetes, Spinnaker, Jenkins, Kibana, Prometheus, and Grafana. We are constantly on the lookout for new technology to improve our codebase and stack.