Senior Application Security Engineer

Zip is the AI platform for enterprise procurement, helping companies streamline their operations and innovate faster through AI agents. Trusted by leading enterprises such as T-Mobile, OpenAI, AMD, and Mars, Zip has helped save over $8 billion and processed over $500 billion in spend. The company has raised $371 million at a $2.2 billion valuation, backed by prominent investors, and has received accolades from Forbes Fintech 50 and Fast Company's Most Innovative Companies. The team comprises product leaders from top tech companies and former procurement leaders from major organizations.

Introduction

Zip is an AI platform for enterprise procurement, helping companies streamline their operations and innovate faster through AI agents. The Security team at Zip is seeking its first Senior Application Security Engineer to protect customer data by building foundational security guardrails and leading key security initiatives. This role is pivotal for Zip's rapid growth as it expands into new products and markets like EMEA and Federal government space.

Responsibilities

• Design and implement technical controls to eliminate or mitigate classes of security vulnerabilities.
• Support the development of secure products through design reviews, threat models, static/dynamic scans, and hands-on security assessments.
• Validate, triage, and coordinate security findings from bug bounty programs and third-party penetration tests.
• Mentor security analysts and security champions on security best practices and techniques.

Requirements

• Experience writing production-quality code for security tooling and services.
• Strong written and verbal communication with internal and external stakeholders.
• A solid understanding of security risks and the ability to balance security with business requirements.
• Experience with web applications, APIs, and cloud environments. Our stack includes Python, React, GraphQL, Kubernetes, and AWS.

Nice to Have

• Familiarity with compliance frameworks such as SOC 2, ISO 27001, and FedRAMP.
• Hands-on experience in offensive security (e.g., through bug bounty programs or CTFs).

Benefits

• Start-up equity
• 100% health, vision & dental coverage options
• Catered breakfast, lunch, & dinner
• Flexible PTO
• ClassPass membership
• Monthly commuter benefit
• Team building events & happy hours
• Home office stipend
• Phone/internet reimbursement
• Paid parental leave
• Fertility stipend
• 401k plan
• Unlimited AI token usage

About Company

Zip is the AI platform for enterprise procurement, enabling humans and AI agents to work together to orchestrate procurement across teams, tools, and suppliers. Trusted by leading enterprises such as T-Mobile, OpenAI, AMD, and Mars, Zip has helped save over $8 billion and processed over $500 billion in spend. The company has raised $371 million at a $2.2 billion valuation, backed by prominent investors, and has received accolades from Forbes Fintech 50 and Fast Company's Most Innovative Companies. The team comprises product leaders from top tech companies and former procurement leaders from major organizations.

How to Apply

We encourage all candidates to apply even if their experience doesn't exactly match the job description. Zip is committed to building a diverse and inclusive workspace.