Senior Security Engineer

3M HEALTHCARE; Minneapolis (MN); Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Medical, dental, vision

401k plan

Discretionary vacation

Paid holidays

Paid sick leave

Annual bonus

Restricted stock units

Job summary

Shipt is seeking a Senior Cloud Security Engineer to join our Network and Endpoint Security team. You will design secure cloud network architectures, own CSPM/CNAPP tooling, and provide input on secure designs for new services or migrations.

You will develop security automations and scripts to automate detection, response, and incident handling in production environments, and lead threat modeling for cloud services to identify weaknesses in design and architecture.

Qualifications

• Minimum of 5 years in an information security-focused role.
• At least 2 years of hands-on experience with a major cloud provider (AWS/GCP/Azure).
• Direct experience with Infrastructure-as-Code (Terraform) and source control (Git/GitHub).
• Strong documentation and architectural diagramming skills.

Responsibilities

• Design and maintain secure cloud network architectures using CSPM and CNAPP tools, and advise on secure designs for new services or migrations.
• Develop and maintain security tools, automations, and scripts to automate detection, response, and incident handling in production.
• Lead threat modeling exercises for cloud services and applications to identify design weaknesses.

Skills

Cloud Infrastructure

Cloud Security

DevSecOps

Tools

Terraform

Git/GitHub

Job description

Senior Cloud Security Engineer - Overview

Impact: We are actively looking for a Senior Cloud Security Engineer to join our Network and Endpoint Security team. This team plays a crucial role in securing Shipt's applications, endpoints, and cloud infrastructure as well as assisting engineering teams in implementing cybersecurity best practices.

Responsibilities

• Design and maintain secure cloud network architectures, including extensive use and ownership of CSPM and CNAPP tools, and provide input on secure architecture/design for new services or migrations.
• Develop and maintain custom security tools, automations, and scripts to automate detection, analysis, response processes, centralize incident response and alerting, and support and guide efforts to resolve issues in production environments, including responding to, investigating, and remediating security incidents.
• Lead and perform formal threat modeling exercises for new and existing cloud services and applications to proactively identify security weaknesses in design and architecture.

Qualifications

• Minimum of 5 years of on-the-job experience in an information security-focused role, with at least 2 years working with a major cloud provider (GCP, AWS, Azure).
• Robust understanding and experience in maintaining mission-critical, resilient, and highly available cloud architectures.
• Direct, hands‑on experience with Infrastructure-as-Code (e.g., Terraform) and source version control (Git/GitHub).
• Experience with creating detailed documentation and architectural diagrams.
• Experience with cloud service providers (GCP, AWS, Azure).
• Direct, hands‑on experience using and securing Kubernetes clusters with advanced knowledge of containerization methodologies.
• Experience automating and orchestrating security tasks using REST APIs and/or scripting languages like Python, Bash, and Go.
• Experience developing solutions with Agentic Engineering and AI, including responsible usage concepts.
• Deep technical knowledge of TCP/IP networking, application protocols, and network security.

Required Skills

• Cloud Infrastructure, Cloud Security, DevSecOps

Work Arrangement

Shipt considers candidates located near a Shipt office or workspace in Birmingham, San Francisco, or Minneapolis to be hybrid, which means that they have the flexibility to work from home (with leader approval) or at a Shipt office in order to facilitate the ability to innovate, collaborate, and spark team connections. In‑office expectations will vary by role and leader. Certain roles may require in‑office presence on a full‑time basis. Please work with your recruiter to learn more about the classification of this role.

Benefits

• Employees (and eligible family members) are covered by medical, dental, vision and more.
• Employees may enroll in our company’s 401k plan.
• Employees will also be eligible to receive discretionary vacation for exempt team members, paid holidays throughout the calendar year and paid sick leave.
• Other compensation includes eligibility for an annual bonus and the potential for restricted stock units based on role.

Equal Opportunity Employer Statement

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, color, national origin, ethnicity, religion or religious belief, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender, gender identity, gender expression, transgender status, sexual stereotypes, age, military or veteran status, disability, or any other characteristic protected by law. Please inform your recruiting contact upon initial connection if you need a reasonable accommodation. If you need assistance filling out a job application, please complete this form.