Staff Application Security Engineer

Shipt; United States; Hybrid; USD 180,000 - 240,000; Full time

Job summary

Shipt is seeking a Staff Engineer on the Application Security team to lead secure practices across our engineering organization. You will design, implement, and scale security controls to protect user data and empower developers.

This role requires mentoring teammates, providing technical leadership, and driving security culture across all levels of the company. You will collaborate with cross-disciplinary teams to safeguard customers and shoppers nationwide.

Qualifications

• 5+ years software engineering with focus on tooling or infrastructure.
• Experience with Terraform and IaC.
• 4+ years in Go, Python, or JavaScript/TypeScript.
• CI/CD experience across the software development lifecycle.
• Experience with cloud platforms, especially Kubernetes.
• Experience building APIs, automation tools, and developer-facing services.
• Knowledge of common security vulnerabilities and remediation approaches.
• Experience with system design and architecture skills.
• Experience translating business requirements into practical development solutions.

Skills

Dev tooling

Go

Python

JavaScript/TypeScript

CI/CD

Kubernetes

APIs

Security awareness

System design

Requirements translation

Education

Bachelor's degree or equivalent experience

Tools

Terraform

Kubernetes

Job description

Impact

Impact

As a Staff Engineer on our Application Security team, you will be instrumental in leading and driving secure practices across Shipt. You'll be responsible for development practices across our engineering organization and building software systems to make secure development easier. In this role, you will design, implement, and scale security controls and processes that protect Shipt’s users, empower Shipt developers, ensure the safety of our applications, and protect user data. As a Staff Engineer, you are expected to operate at a high level of technical proficiency, provide technical leadership, mentor other team members, and influence security culture at all levels of the company.

If you are enthusiastic about cybersecurity, enjoy sharing your knowledge, and thrive on personal and professional growth, you’re exactly the kind of engineer we’re looking for. Our Shipt Cybersecurity team is growing, and we’re looking for talented individuals who can work both independently and collaboratively, with a passion for mentoring and developing their colleagues. You will gain valuable experience collaborating with cross-disciplinary teams, contributing to the protection of customers and shoppers nationwide

What You’ll Need to Be Successful

• 5+ years software engineering experience with focus on developer tooling or infrastructure
• You have experience with Infrastructure as Code tools, such as Terraform
• 4+ years hands on development with Go, Python, and/or JavaScript/TypeScript
• Experience building with CI/CD systems as part of the software development lifecycle
• Experience working and deploying with cloud platforms, especially Kubernetes
• Experience building APIs, automation tools, and developer-facing services
• Knowledge of common security vulnerabilities and remediation approaches
• Experience with system design and architecture skills
• Experience translating business requirements into practical development solutions

Skills & Education

This list includes key skills used in this job but is not inclusive of all skills needed for the role. Please see any required education below.

Application Security, Python (Programming Language), Web Application Firewall (WAF)Bachelor’s Degree or equivalent experience| Required

Work Arrangement

To foster connection while offering continued flexibility, hybrid team members have the following in-office expectations:

Hybrid roles in Birmingham, AL typically work in-office at least 2 days per week, with core in-office days on Wednesdays and Thursdays.

Hybrid roles in Minneapolis, MN typically work in-office at least 1 day per week on either Tuesday, Wednesday, or Thursday.

Hybrid roles in San Francisco, CA typically work in-office at least 1 day per week between Monday and Thursday.

Certain roles may require in-office presence on a full-time basis. Please work with your recruiter to learn more about the classification of this role.

About Shipt

Shipt is a retail tech company that connects people to reliable, high-quality delivery with a personal touch. Shipt connects customers to the things they want from the stores they love, retail businesses to more satisfied customers, and workers to new earning opportunities.

At Shipt, we aim to put our team first to boost a sense of belonging, spark opportunities for growth, provide unique benefits and commit to giving back to our communities in ways that make life better, both personally and professionally. We understand that our service, our culture, and our connection to our communities are only made better by every single person who shows up to work here every day. Learn More.

Shipt is an independently operated, wholly owned subsidiary of Target Corporation and available in more than 5,000 U.S. cities. Shipt was founded and is headquartered in Birmingham, Alabama. For more information, please visit Shipt’s company site at Shipt.com.

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, color, national origin, ethnicity, religion or religious belief, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender, gender identity, gender expression, transgender status, sexual stereotypes, age, military or veteran status, disability, or any other characteristic protected by law.

Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.

Employees (and eligible family members) are covered by medical, dental, vision and more. Employees may enroll in our company’s 401k plan. Employees will also be eligible to receive discretionary vacation for exempt team members, paid holidays throughout the calendar year and paid sick leave. Other compensation includes eligibility for an annual bonus and the potential for restricted stock units based on role.