Senior Application Security Engineer

Zip is the AI platform for enterprise procurement, enabling businesses to innovate faster by orchestrating procurement across teams, tools, and suppliers with AI agents. Trusted by major enterprises like T-Mobile, OpenAI, AMD, Mars, and Dollar Tree, Zip has helped save over $8 billion and process over $500 billion in spend. The team comprises product leaders from top tech companies and former procurement leaders. Backed by prominent investors, Zip has raised $371 million, with a recent valuation of $2.2 billion, and has been recognized by Forbes Fintech 50 and other industry awards.

Introduction

Zip is a leading AI platform for enterprise procurement, enabling businesses to innovate faster by orchestrating procurement across teams, tools, and suppliers with AI agents.

The Security team at Zip is seeking its first Application Security Engineer. This high-impact role will be crucial in establishing foundational security guardrails, launching key security initiatives, and reinforcing customer trust. Your contributions will be vital to Zip's rapid growth as it expands into new products like AI Agents and an App Marketplace, and enters new markets including EMEA and the Federal government space. The team operates at a fast pace, tackling complex technical and product challenges, and values engineers who can autonomously scope and solve problems while benefiting from constant guidance and mentorship.

Responsibilities

• Design and implement technical controls to eliminate or mitigate classes of security vulnerabilities.
• Support the development of secure products through design reviews, threat models, static/dynamic scans, and hands-on security assessments.
• Validate, triage, and coordinate security findings from bug bounty programs and third-party penetration tests.
• Mentor security analysts and security champions on security best practices and techniques.

Requirements

• Experience writing production-quality code for security tooling and services.
• Strong written and verbal communication skills with internal and external stakeholders.
• A solid understanding of security risks and the ability to balance security with business requirements.
• Experience with web applications, APIs, and cloud environments. Our stack includes Python, React, GraphQL, Kubernetes, and AWS.

Nice to Have

• Familiarity with compliance frameworks such as SOC 2, ISO 27001, and FedRAMP.
• Hands-on experience in offensive security (e.g., through bug bounty programs or CTFs).

Benefits

At Zip, we’re committed to providing our employees with everything they need to do their best work:

• Start-up equity
• 100% health, vision & dental coverage options
• Catered breakfast, lunch, & dinner
• Flexible PTO
• ClassPass membership
• Monthly commuter benefit
• Team building events & happy hours
• Home office stipend
• Phone/internet reimbursement
• Paid parental leave
• Fertility stipend
• 401k plan
• Unlimited AI token usage

About Company

Zip is the AI platform for enterprise procurement, built to facilitate collaboration between humans and AI agents. It orchestrates procurement processes across teams, tools, and suppliers, empowering companies to rapidly secure resources for innovation. Trusted by major enterprises like T-Mobile, OpenAI, AMD, Mars, and Dollar Tree, Zip has helped save over $8 billion and process over $500 billion in spend. The team comprises product leaders from top tech companies and former procurement leaders. Backed by prominent investors including Adams Street, Alkeon, BOND, CRV, DST, Tiger Global, and Y Combinator, Zip has raised $371 million, with a recent valuation of $2.2 billion. It has garnered recognition from Forbes Fintech 50, Fast Company's Most Innovative Companies, Inc. Best in Business, and LinkedIn Top Startups.

How to Apply

We encourage all candidates to apply, even if your experience doesn't perfectly match the job description. We are committed to building a diverse and inclusive workspace.