Staff Application Security Engineer: Lead Secure DevTools

Shipt; San Francisco (CA); Hybrid; USD 180,000 - 240,000; Full time

Job summary

Shipt is seeking a Staff Engineer to lead secure development practices across our engineering org. You will design, implement, and scale security controls that protect user data and empower developers, while mentoring team members and shaping security culture at all levels of the company.

You’ll collaborate with cross-disciplinary teams, contribute to API and automation tool development, and help ensure secure software throughout the lifecycle.

Qualifications

• 5+ years software engineering experience with focus on developer tooling or infrastructure.
• 4+ years hands on development with Go, Python, and/or JavaScript/TypeScript.
• Experience building with CI/CD systems as part of the software development lifecycle.
• Experience working and deploying with cloud platforms, especially Kubernetes.
• Experience building APIs, automation tools, and developer-facing services.
• Knowledge of common security vulnerabilities and remediation approaches.
• Experience with system design and architecture skills.
• Experience translating business requirements into practical development solutions.

Responsibilities

• Lead and drive secure practices across Shipt and scale security controls.
• Design, implement, and scale security processes protecting user data and applications.
• Mentor engineers and influence security culture across the company.
• Collaborate with cross-disciplinary teams to protect customers and shoppers nationwide.

Skills

Application Security

Python

Web Application Firewall

Education

Bachelor's Degree or equivalent experience

Tools

Terraform

Kubernetes

CI/CD systems

Job description

Shipt is seeking a Staff Engineer to lead secure development practices across our engineering org. You will design, implement, and scale security controls that protect user data and empower developers, while mentoring team members and shaping security culture at all levels of the company.

You’ll collaborate with cross-disciplinary teams, contribute to API and automation tool development, and help ensure secure software throughout the lifecycle.