Staff Application Security Engineer

Shipt, Inc.; Minneapolis (MN); On-site; USD 95,800 - 180,000; Full time

Job summary

Shipt, Inc. in Minneapolis is seeking a Staff Engineer for the Application Security team. In this role, you will lead secure practices, design and implement security controls, and mentor team members. You must have extensive software engineering experience and proficiency in Go, Python, or JavaScript/TypeScript.

The position offers a competitive salary range of $95,800–$180,000 based on qualifications and skills, along with opportunities to influence the security culture at Shipt.

Qualifications

• Extensive software engineering experience focused on developer tooling or infrastructure.
• 5+ years of programming skills in Go, Python, and/or JavaScript/TypeScript.
• Experience with Web Application Firewall (WAF).
• Familiarity with containerization concepts and tools.
• Experience working on and deploying with cloud platforms.
• Experience building APIs, automation tools, and developer-facing services.
• Strong system design and architecture skills.

Responsibilities

• Design, implement, and scale security controls and processes to protect Shipt's users.
• Provide technical leadership, mentor team members, and influence security culture.

Skills

Programming in Go

Programming in Python

Programming in JavaScript/TypeScript

Web Application Firewall (WAF)

Containerization concepts and tools

Cloud platforms

Building APIs

Automation tools

Infrastructure as Code tools (Terraform)

System design and architecture

Tools

Terraform

Job description

As a Staff Engineer on the Application Security team, you will lead and drive secure practices across Shipt. You’ll be responsible for development practices across our engineering organization and build software systems to make secure development easier. In this role, you will design, implement, and scale security controls and processes that protect Shipt’s users, empower Shipt developers, ensure the safety of our applications, and protect user data.

As a Staff Engineer, you are expected to operate at a high level of technical proficiency, provide technical leadership, mentor other team members, and influence security culture at all levels of the company.

Responsibilities

• Design, implement, and scale security controls and processes that protect Shipt’s users, empower Shipt developers, ensure the safety of our applications, and protect user data.
• Provide technical leadership, mentor other team members, and influence security culture across the company.

Qualifications

• Extensive software engineering experience, with a focus on developer tooling or infrastructure.
• 5+ years of programming skills in Go, Python, and/or JavaScript/TypeScript.
• Experience with Web Application Firewall (WAF).
• Familiarity with containerization concepts and tools.
• Experience working on and deploying with cloud platforms.
• Experience building APIs, automation tools, and developer‑facing services.
• Experience with Infrastructure as Code tools, such as Terraform.
• Strong system design and architecture skills.
• Experience translating business requirements into practical development solutions.
• Led the design, implementation, and validation of secure coding practices, application security controls, and integration of security platforms.
• Understanding of tools and techniques leveraged to breach networks, server systems, cloud workloads or applications.

Nice to Have

• Certifications such as CISSP, OSWE, CSSLP, GWAPT, GWEB, OSCP, CompTIA Security+.
• Familiarity with open‑source software and dependency management.
• Experience managing, configuring and troubleshooting CDN & WAF technologies.

Pay Range

$95,800–$180,000 (guideline; compensation will vary based on qualifications, skill level, competencies, and work location).

EEO Statement

We are an equal‑opportunity employer and value diversity at our company. We do not discriminate on the basis of race, color, national origin, ethnicity, religion or religious belief, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender, gender identity, gender expression, transgender status, sexual stereotypes, age, military or veteran status, disability, or any other characteristic protected by law. Please inform your recruiting contact upon initial connection if you need a reasonable accommodation.