
1001 - 5000 employees
đł Fintech
đď¸ eCommerce
đ¸ Finance
Fintech ⢠eCommerce ⢠Finance
Zip Co is a global âBuy Now, Pay Laterâ company that provides simpler and fairer payment solutions for millions of customers. With a mission to be the first payment choice everywhere and every day, Zip offers transparent, flexible, and interest-free credit to consumers and businesses. The company partners with major brands like Amazon, Best Buy, eBay, and Uber, focusing on people-centred innovation and financial empowerment.
đĽ 0 minutes ago
đşđ¸ United States â Remote
đľ $203k - $254k / year
â° Full Time
đ´ Lead
đŽââď¸ Cybersecurity / Security Engineer
đŚ H1B Visa Sponsor
đť Ghost score 0%
Where this job comes from
Posted on Zip Co's careers page, not through a job board
First seen by Remote Rocketship 0 minutes ago

1001 - 5000 employees
đł Fintech
đď¸ eCommerce
đ¸ Finance
Fintech ⢠eCommerce ⢠Finance
Zip Co is a global âBuy Now, Pay Laterâ company that provides simpler and fairer payment solutions for millions of customers. With a mission to be the first payment choice everywhere and every day, Zip offers transparent, flexible, and interest-free credit to consumers and businesses. The company partners with major brands like Amazon, Best Buy, eBay, and Uber, focusing on people-centred innovation and financial empowerment.
⢠Lead the technical direction for securing AI applications, autonomous agents, and AI-enabled engineering workflows at Zip ⢠Architect and build scalable security controls for LLM applications, RAG systems, and agentic AI platforms ⢠Develop AI security testing, automation, and secure-by-default engineering practices ⢠Define and implement security architecture for LLM applications, RAG, autonomous agents, and AI-powered products ⢠Engineer protections against prompt injection, data exfiltration, insecure tool execution, excessive agency, and other AI-specific threats ⢠Establish secure patterns for model access, NHI access, authorization, secrets management, and sensitive data protection ⢠Design security boundaries for AI agents interacting with enterprise systems, APIs, databases, and cloud infrastructure ⢠Establish secure-by-default patterns, harnesses, and guardrails for AI coding assistants, autonomous development agents, and AI-generated software ⢠Secure MCP servers, agent tool integrations, and AI-enabled development workflows ⢠Build reusable security components, APIs, and automation integrated into engineering platforms and CI/CD pipelines ⢠Build automated security testing and evaluation capabilities for AI applications and agents ⢠Develop AI red teaming, prompt injection testing, and security regression testing ⢠Implement monitoring and detection for suspicious AI behavior, unauthorized tool execution, and sensitive data exposure ⢠Perform post-incident response for agent misalignment and partner with the Agentic Platform team to prevent recurrence ⢠Leverage AI to automate threat modeling, vulnerability analysis, and remediation ⢠Establish Zip's technical direction and engineering standards for AI security ⢠Partner with engineering teams to take secure AI solutions from architecture through production ⢠Design risk-tiering logic aligned with Zip's 5-level AI automation classification ⢠Co-own the security evaluation framework for new AI models and third-party tools ⢠Evaluate emerging AI technologies and security capabilities, making pragmatic build-versus-buy decisions ⢠Mentor engineers and influence technical decisions across security, platform engineering, and software development ⢠Success includes scalable AI security architecture, reusable controls, integrated testing/monitoring/enforcement, reduced manual effort, and secure innovation
⢠Demonstrated Staff or Principal-level technical leadership in security engineering, application security, or cloud security ⢠Deep security engineering experience plus demonstrable hands-on work with LLM/agent systems ⢠Intimate familiarity with OWASP Top 10 for LLM Applications, MITRE ATLAS, and NIST AI RMF ⢠Strong understanding of LLM architectures, agentic systems, RAG, and modern AI development frameworks ⢠Experience building AI security evaluations, red-teaming capabilities, model security gateways, and securing AI systems against prompt injection, data leakage, tool abuse, and unauthorized access ⢠Strong software engineering skills, including proficiency in Python or another modern programming language ⢠Experience with cloud-native architectures, APIs, containers, IAM, and modern software delivery practices ⢠Ability to design and implement security controls, automation, and reusable engineering components ⢠Experience threat modeling complex systems and translating security requirements into practical solutions ⢠Strong technical leadership skills with the ability to influence architecture and engineering decisions across teams ⢠A builder's mindset focused on automation, scalability, and secure-by-default engineering ⢠Highly regarded: Experience with LangChain, LangGraph, Semantic Kernel, OpenAI APIs, Azure AI, Google Vertex AI, or similar technologies ⢠Highly regarded: Experience securing MCP servers, autonomous coding agents, or agentic workflows ⢠Highly regarded: Experience with Microsoft Azure, Google Cloud Platform (GCP), Terraform, Kubernetes, and CI/CD security ⢠Highly regarded: Experience in financial services, payments, or other regulated environments ⢠Visa sponsorship is not available for this position
⢠Flexible working culture ⢠Incentive programs ⢠Unlimited PTO ⢠Generous paid parental leave ⢠Leading family support policies ⢠Company-sponsored 401k match ⢠Learning and wellness subscription stipend ⢠Beautiful Union Square office with a casual dress code ⢠Industry-leading, employer-sponsored insurance for you and your dependents, with several 100% Zip-covered choices available ⢠Bonus and/or commission awards may be included in total compensation ⢠Visa sponsorship is not available for this position
Apply NowImprove your chances of getting an interview by checking your resume score before you apply.
đĽ 4 hours ago
Principal incident responder leading complex cyberattack investigations, containment, and recovery for Stryker medical technology. Improving playbooks, detection, automation, and cybersecurity readiness.
đşđ¸ United States â Remote
đľ $135.6k - $293.7k / year
â° Full Time
đ´ Lead
đŽââď¸ Cybersecurity / Security Engineer
đŚ H1B Visa Sponsor
đĽ 8 hours ago
Head of Security and Compliance owning SOC 2, customer security reviews, policies, and incident response. Protecting Korbytâs workplace-experience communications platform as a one-person security function.
đşđ¸ United States â Remote
đ° Private equity on 2023-08
â° Full Time
đ´ Lead
đŽââď¸ Cybersecurity / Security Engineer
đĽ 15 hours ago
Director leading security governance, compliance, and risk programs at SentiLink, which verifies identities and flags fraud. Owning FedRAMP, SOC 2, PCI DSS, and third-party risk.
đşđ¸ United States â Remote
đľ $200k - $260k / year
đ° $70M Series B on 2021-08
â° Full Time
đ´ Lead
đŽââď¸ Cybersecurity / Security Engineer
đŚ H1B Visa Sponsor
đĽ 19 hours ago
Director securing IRENâs AI data centers and GPU clusters across operational technology, compliance, supply chain, and physical facilities. Leading fleet-wide security standards and specialist teams.
đĽ 21 hours ago
Cloud security consulting director leading 3Cloudâs Azure security solutions, delivery, and team development. Driving client advisory, go-to-market strategy, account growth, and AI security adoption.