Staff Engineer

At Shipt, we are transforming the grocery shopping experience and giving time back to consumers. Shipt shoppers handpick fresh groceries and household essentials, then deliver them to your door in as little as one hour. At Shipt, we are transforming the shopping experience and giving time back to consumers. Shipt Shoppers handpick everything from fresh groceries to household essentials, then deliver them to your door in as little as one hour. Excited to grow with Shipt? Are you passionate about security, sharing knowledge, growing your skills, and working with great people? The Shipt Application Security team is growing and we are looking for extraordinary engineers who enjoy building things and solving complex problems as much as we do. The Staff Application Security Engineer at Shipt will be tasked with collaborating with the broader organization to ensure all Shipt owned information assets are secured properly, as well as developing and maintaining codebases crucial to security infrastructure. What You’ll Work On Configure, monitor, and administrate the Web Application Firewall to protect and control access to our applications and services Write code for and maintain microservices and other software crucial to our security infrastructure Partner with engineers across the organization in performing security assessments including code reviews, threat modeling, and testing (ex: SAST, DAST, Pen Testing) Consult with product teams on secure coding best practices and develop enterprise wide training Design and implement security controls to be leveraged through all phases of the Software Development Lifecycle Administrate Shipt’s bug bounty program (HackerOne) Collaborate within the Shipt security team to secure the organization’s environments, assess risk, and maintain compliance Apply inspection/debugging techniques to metrics/telemetry, logs, events, and other information sources to diagnose operational issues and assist with remediating incidents About You Shipt has a strong personal growth culture, and provides frequent training opportunities, so even if not all these describe you, please don’t be afraid to apply! You have 4 years of experience working in a network, application, or general security engineer role You have 4 years experience in software development with proficiency in a programming languages; preferably Go, Ruby, Java, or Python You have experience in cloud computing platforms such as AWS, GCP, or Azure You have experience with Infrastructure as code (ex: Terraform) You have strong communication skills, both with technical and non-technical teams You have strong project planning skills, and are able to lead and execute projects with minimal guidance You have experience with microservices and container based application deployment You have working knowledge of the OWASP security fundamentals You have experience with planning, researching and developing security policies, standards and procedures You have experience in and are comfortable with a distributed team. We have team members in Birmingham AL, San Francisco CA, Minneapolis MN, and working remotely in cities across the country You have a strong passion for acquiring and sharing knowledge of security We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. Work Arrangement: Shipt considers candidates located near a Shipt office or workspace in Birmingham, San Francisco, or Minneapolis to be hybrid, which means that they have the flexibility to work from home (with leader approval) or at a Shipt office in order to facilitate the ability to innovate, collaborate, and spark team connections. In-office expectations will vary by role and leader. Certain roles may require in-office presence on a full-time basis. Please work with your recruiter to learn more about the classification of this role. We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, color, national origin, ethnicity, religion or religious belief, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender, gender identity, gender expression, transgender status, sexual stereotypes, age, military or veteran status, disability, or any other characteristic protected by law. Please inform your recruiting contact upon initial connection if you need any accommodations. Shipt is an online marketplace providing same-day delivery from national retailers and local stores. Powered by a community of exceptional shoppers and convenient app and web platforms, we bring fresh groceries, home essentials, pet supplies, and more to more than 70% of households in over 5,000 U.S. cities. Shipt is an independently-operated, wholly-owned subsidiary of Target Corp. It was founded and is headquartered in Birmingham, Alabama, and also has an office in San Francisco. For more information, visit shipt.com.