Senior Security Engineer

Job description

**About zaimler** AI agents can't reason over data they don't understand. Enterprise data today is fragmented across dozens of systems with no shared context, meaning, or structure, and that's why most enterprise AI is failing. The shift from copilots to autonomous agents is creating an entirely new infrastructure layer, and we're building it. zaimler is the context infrastructure for the agentic era: a platform that automatically discovers domain knowledge, maps relationships, and gives AI agents the semantic understanding to operate with precision at scale. Imagine knowledge graphs that support real-time inference, built for systems that need to reason, not just retrieve. zaimler was founded by Biswajit Das (ex-VP Engineering, Truera), a Data Infra veteran and former Chief Architect at Visa, and Sofus Macskassy (ex-Director of Engineering, LinkedIn), who built one of the largest knowledge graphs in production in the industry at LinkedIn. We're growing and deploying with major enterprises across insurance, travel, and technology. If you want to build infrastructure that the next decade of enterprise AI runs on, we'd love to talk. **The Role** We are seeking a Senior Security Engineer to strengthen the security posture of our cloud infrastructure and applications. This role is critical to proactively identifying and reducing risk, automating security controls, building a framework, and ensuring zaimler’s platforms remain secure, resilient, and compliant as the business scales. As a Senior Security Engineer, you will partner closely with DevOps, platform, and application teams to embed security into day-to-day engineering workflows. You will help shift security left, reduce operational risk, and enable teams to move fast without compromising security. ### What You’ll Do: - **Integrated Security:** Embed automated security testing (SAST/DAST) into CI/CD pipelines to identify vulnerabilities and their resolution early. - **Secure Infrastructure:** Implement safeguards across infrastructure-as-code, containers, and cloud environments to minimize risk from misconfigurations or unintended use. - **Threat Management:** Automate vulnerability scans and real-time threat responses to reduce risks. Participate in the security triage and vulnerability management process. - **Compliance:** Ensure adherence to standards like SOC 2 or GDPR within DevOps processes. - **Efficiency:** Automate manual security tasks, accelerate development, and reduce delays caused by late-stage fixes. - **Resilience:** Build robust defenses against evolving threats with incident response playbooks and threat intelligence. ### What We’re Looking For: - 5+ years of experience as a Security Engineer or in a similar role with a strong foundation in CI/CD, automation, and cloud infrastructure - Strong understanding of cloud security principles (AWS, GCP, or Azure) - Experience securing CI/CD pipelines (e.g., GitHub Actions, GitLab CI, Jenkins, Harness) - Familiarity with infrastructure-as-code and related security tools - Proficiency in scripting languages (Python, Bash, etc.) - Hands-on experience with container security (e.g., Docker image scanning, Kubernetes best practices) - Knowledge of IAM, secrets management, and secure key handling - Experience with vulnerability scanning, remediation workflows, and risk prioritization. - Ability to identify and mitigate misconfigurations in cloud and IaC environments - Comfortable collaborating with DevOps, platform, and application teams ### Nice to Have: - Familiarity with compliance frameworks (SOC 2, ISO 27001, NIST, HIPAA, GDPR, etc.) - Experience with security monitoring and incident response processes - Exposure to SIEM or EDR tools - Experience with SAST/DAST and dependency scanning tools - Familiarity with zero-trust networking concepts - Knowledge of threat modeling and risk assessment practices ### Why zaimler: - Build foundational infrastructure for production-grade AI systems - Work closely with senior engineers and founders - High ownership, real impact, and room to shape how security is done - Early-stage environment with strong technical ambition