Hi there!
We're looking for someone to join our Engineering team at Zapier as a Security Infrastructure Engineer. Are you interested in helping build and secure a powerful automation tool? Then read on…
We know applying for and taking on a new a job at any company requires a leap of faith. We want you to feel comfortable and excited to apply at Zapier. To help share a bit more about life at Zapier, here are a few resources in addition to the job description that can give you an inside look at what life is like at Zapier. We hope you'll take the leap of faith and apply.
- Our Commitment to Applicants
- Culture and Values at Zapier
- Zapier Guide to Remote Work
- Zapier Code of Conduct
- Diversity and Inclusivity at Zapier
Zapier is proud to be an equal opportunity workplace dedicated to pursuing and hiring a diverse workforce.
Even though our job description may seem like we're looking for a specific candidate, the role inevitably ends up tailored to the person who applies and joins. Regardless of how well you feel you fit our description, we encourage you to apply if you meet these criteria:
You care deeply about building secure products in secure ways that simplify the lives of millions of people through automation.
About You
You have web application and infrastructure security experience. Keeping the core Zapier web application secure is at the heart of this role. Zapier is a SaaS product, so experience building software and managing infrastructure under a similar model is a big plus.
You love writing software and building infrastructure. Most of what you’ll do each day is guiding, building and maintaining Zapier's infrastructure and product. You'll focus on high value, high risk portions of Zapier. You'll use code to automate and improve the more mundane parts of auditing and monitoring of internal processes, as well as in the product.
You have worked with teams before on large Python, AWS, & Kubernetes projects. You’re also familiar with frameworks for several languages like Django/Flask or React/Backbone.js. You've also worked extensively in cloud providers like AWS, GCE, or Azure as well as container automation frameworks like Kubernetes.
You love doing things efficiently. At Zapier, the work you do will have a disproportionate impact on the business. We believe in systems and processes that let us scale our impact to be larger than ourselves. You'll be in a unique position to find and eliminate "insecure and painful" experiences and replace them with "secure and joyful" experiences.
You love learning. Engineering is an ever-evolving world. You enjoy playing with new tech and exploring areas that you might not have experience with yet.
You love to set your own direction. At Zapier, we have one team meeting each week and one-on-one meetings every month. Between those we chat in Slack and then go make things happen.
You are friendly and patient, welcoming, considerate, and respectful. Learn more about these attributes in our code of conduct.
Things You Might Do
Zapier is a small, fast-growing, and remote-first company, so you'll likely get experience on many different projects across the organization. That said, here are some things you'll probably do:
- Write some Python!
- Build and maintain tooling to log, monitor and audit our infrastructure. You'll do this via AWS SDKs, k8s APIs, or directly.
- Periodically embed with product teams with to help with security sensitive projects.
- Migrate tooling to SSO/SAML providers to reduce password risk and improve UX.
- Build internal tooling to ensure safe data access patterns for Zapier employees.
- Review code across Zapier's product and infrastructure.
- Locating weak points across Zapier and strengthening them.
- Ship code to millions of users every week.
- As part of our All Hands Support initiative, help customers have the best experience with Zapier as possible.
How to Apply
This is a security focused role. If this isn't a good fit for you, we do have an Infrastructure Engineer (Western Hemisphere) that you can apply to instead.
We have a non-standard application process. To jump-start the process we ask a few questions we normally would ask at the start of an interview. This helps speed up the process and lets us get to know you a bit better right out of the gate. Please make sure to answer each question.
Complete this form with answers to the below questions. Make sure each answer stands alone as we review question-by-question instead of applicant-by-applicant.
- Tell us why you’d be a good fit for the role. Please reference any particular parts of the "About You" and "Things You Might Do" sections that fit you and why.
- Tell us about the most difficult API/library/software bug you've squashed. We love troubleshooting stories!
- Tell us about an engineering solution you've built that you're particularly proud of. Don't skimp on the technical details!
- Tell us about the largest deployment you've worked on. What was your role and what did the team look like?
- Tell us about your favorite technology to work with and why.
- Share some code (preferably Python) that you’ve written. You can include a link to a GitHub, GitLab, or other public code repository. Or provide us with a 500+ Line of Code (LOC) sample via Dropbox, gist, or other link to help us get a feeling for how you write code.
- How might you gradually introduce auditing and permissions into many disparate SaaS services and custom applications?
- What steps can you take to ensure that an average application (that might utilize AWS secret keys, database credentials, makes internal and external API calls, etc.) would have minimal negative impact on a server or the internal network if it were compromised?
- Optional: Share anonymously some demographic information about yourself to help us better track trends related to the backgrounds of candidates interested in working at Zapier in order for us to build a team that represents the users at Zapier and the broader world population.
Finally, wait for us to reply! You are going to hear back from us, even if we don't seem like a good fit. In fact, throughout the process, we strive to make sure you never go more than seven days without hearing from us.
by via developer jobs - Stack Overflow
No comments:
Post a Comment