Staff App Sec Engineer: Lead Secure Dev Tools

Shipt; Town of Texas (WI); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Shipt is seeking a Staff Engineer for the Application Security team to lead secure development practices across the engineering organization. You will design, implement, and scale security controls, mentor colleagues, and influence security culture.

You will collaborate with cross-disciplinary teams to protect user data, build developer-facing security tools, APIs, and automation, and drive security across the SDLC in a hybrid US-based environment.

Qualifications

• 5+ years software engineering experience with focus on developer tooling or infrastructure.
• Experience with Infrastructure as Code tools, such as Terraform.
• 4+ years hands-on development with Go, Python, and/or JavaScript/TypeScript.
• Experience building with CI/CD systems as part of the software development lifecycle.
• Experience working and deploying with cloud platforms, especially Kubernetes.
• Experience building APIs, automation tools, and developer-facing services.
• Knowledge of common security vulnerabilities and remediation approaches.
• Experience translating business requirements into practical development solutions.

Responsibilities

• Lead and drive secure development practices across Shipt's engineering organization.
• Design, implement, and scale security controls and processes to protect user data.
• Mentor team members and influence security culture at all levels of the company.
• Collaborate with cross-disciplinary teams to build developer-facing security tools and automation.

Skills

Software engineering

Terraform

Go

Python

JavaScript/TypeScript

CI/CD

Kubernetes

API development

Security concepts

System design

Education

Bachelor's Degree or equivalent experience

Tools

Terraform

Kubernetes

CI/CD pipelines

Job description

Shipt is seeking a Staff Engineer for the Application Security team to lead secure development practices across the engineering organization. You will design, implement, and scale security controls, mentor colleagues, and influence security culture.

You will collaborate with cross-disciplinary teams to protect user data, build developer-facing security tools, APIs, and automation, and drive security across the SDLC in a hybrid US-based environment.