Senior Security Engineer (IR)
San Francisco, CA, Remote

Here's the gist:

Zenefits is the leading all-in-one HCM (human capital management) solution for small and medium businesses. Designed as an interconnected ecosystem of apps, Zenefits delivers the most complete HR experience by combining its own powerful apps with dozens of best-of-breed providers on the Zenefits platform. Built on a modern technology stack, Zenefits’ platform provides a comprehensive Employee Record tightly integrated with Zenefits’ apps like onboarding, payroll, compliance and benefits administration and partner apps like email, expense management, 401(k), and employee engagement. The result is a powerful HCM solution that helps mid-market businesses manage their people, stay compliant, and save thousands of hours in lost time.

At Zenefits, our security team embodies a collaborative, efficient, and flexible working environment. While responsibilities are clearly defined, we share a common purpose and goal: employing all measures to protect against threats to our business, because our technology governs HR and payroll for tens of thousands of companies. For us, IR is way more than just staring at a screen. It's about the hunt through our systems, developing technology to evict adversaries, and teaching the company how to handle when bad things happen. We are always looking for new ideas and trying to make sure the best ideas rise to the top of the heap. We focus on results and not just debate, in fact, we are often architects, designers, and engineers, not just advisors.


  • Build tools to be able to find adversaries in our systems before they do damage.
  • Develop tactical countermeasures so that we can evict adversaries from our systems wherever they are.
  • Develop analysis tools and process to inform the security team about what adversaries are targeting us and how they are doing so.
  • Be an advocate for security across the whole company.

A little more about you:

  • Have a strong foundation in and in-depth technical knowledge of Incident Detection and Response.
  • Cool-headed under stress and able to calm stakeholders.
  • Can write enough code to get by. (Our Detection/Response Stack includes some interesting Python tools!)
  • Able to deal with the ambiguity associated with working in a fast-paced and changing environment; self-motivated and results-oriented.
  • 3+ years of experience in Incident Response and Security Engineering.
  • Excellent interpersonal communication skills.

Apply for this job

Please provide a valid first name.
Please provide a valid last name.
This field is required.
Please provide a valid phone number.
This field is required.
This field is required.