Security Engineer

Company Overview At Zuora, we do Modern Business . We’re helping people subscribe to new ways of doing business that are better for people, companies and ultimately the planet. It’s an approach resulting from the shift to the Subscription Economy that puts customers first by building recurring relationships instead of one-time product sales and focuses on sustainable growth. Through our leading expertise and multi-product suite, we are transforming all industries and working with the world’s most innovative companies to monetize new business models, nurture subscriber relationships and optimize their digital experiences. The Opportunity Are you excited by the challenge of securing large-scale, cloud-native platforms that power mission-critical billing and revenue systems around the world? As an Infrastructure Security leader at Zuora, you’ll own and evolve the security posture of our modern, distributed infrastructure—protecting the foundation that our customers rely on every day. You’ll design and implement automated, AI-driven security controls for our AWS- and Azure-based environments, partnering closely with engineering, SRE, and operations teams to embed security into how we build and run software. You’ll have significant influence on our cloud security strategy, from zero-trust and detection engineering to vulnerability management and incident response. This is a hands-on, senior individual contributor role with leadership expectations: you’ll set technical direction, mentor others, and help drive a global, follow-the-sun security operations model. If you’re looking to work with modern tooling (CSPM, CWPP, SOAR, EDR/XDR, Kubernetes security, IaC security, AI/ML-based automation) and want your work to materially reduce risk for thousands of customers, this role is for you. * This is a hybrid position, so you'll work both remotely and in the office. About You You’re a senior security engineer or architect with deep experience securing large-scale cloud environments and a track record of turning security strategy into practical, automated solutions. You’re comfortable operating across infrastructure, applications, and operations, and you enjoy partnering with teams to build secure-by-design systems. Experience background Typically 8+ years of progressive experience in infrastructure security, security operations, or security engineering . 3–5+ years of hands-on experience with AWS and/or Azure security , including Infrastructure-as-Code (IaC) tooling (e.g., Terraform, CloudFormation). Experience with containerized workloads and orchestrators such as EKS, ECS, or Kubernetes . Proven experience in security incident handling , root cause analysis, and operational incident management in a 24/7 environment. Experience running or contributing to an infrastructure vulnerability management program (discovery, prioritization, remediation, reporting). Practical experience using automation and/or AI to improve security operations (e.g., SOAR playbooks, code-driven guardrails, detection-as-code). Technical skills Strong understanding of security fundamentals , including operating system internals, networking, cryptographic protocols, and attack surface reduction. Proficiency in at least one scripting language (e.g., Python, PowerShell, Bash, or similar) for automation and tooling. Hands-on experience with modern security platforms , such as: SIEM, SOAR, CSPM, DSPM, CDR, CWPP, EDR/XDR Solid knowledge of cloud-native security services : Examples: IAM, encryption and key management, AWS GuardDuty, WAF, Security Hub, Config, etc. Familiarity with web application security (e.g., OWASP Top 10) and common mitigation patterns. Comfortable with Linux systems administration and troubleshooting in production environments. Soft skills ways of working Strong problem-solving and analytical skills ; able to prioritize impact over noise. Excellent written and verbal communication , including ... (truncated, view full listing at source)