Senior Cloud Security Engineer

Impact

We are actively looking for a Senior Cloud Security Engineer to join our Network and Endpoint Security team. This team plays a crucial role in securing Shipt's applications, endpoints, and cloud infrastructure as well as assisting engineering teams in implementing cybersecurity best practices.

As a Senior Cloud Security Engineer you will design and maintain secure cloud network architectures, including extensive use and ownership of CSPM and CNAPP tools, and provide input on secure architecture/design for new services or migrations. You will also develop and maintain custom security tools, automations, and scripts to automate detection, analysis, response processes, and centralize incident response and alerting and support and guide efforts to resolve issues in production environments, including responding to, investigating, and remediating security incidents.

Lead and perform formal threat modeling exercises for new and existing cloud services and applications to proactively identify security weaknesses in design and architecture.

What You'll Need to Be Successful

• Minimum of 5 years of on-the-job experience in an information security-focused role, with at least 2 years working with a major cloud provider (GCP/AWS/Azure).

• Robust understanding and experience in maintaining mission-critical, resilient, and highly available cloud architectures.

• Direct, hands-on experience with Infrastructure-as-Code (e.g., Terraform) and source version control (Git/GitHub).

• Experience with creating detailed documentation and architectural diagrams.

• Experience with cloud service providers (GCP/AWS/Azure).

• Direct, hands-on experience using and securing Kubernetes clusters with advanced knowledge of containerization methodologies

• Experience automating and orchestrating security tasks using REST APIs and/or scripting languages like Python, Bash, and Go.

• Experience developing solutions with Agentic Engineering and AI, including responsible usage concepts

• Deep technical knowledge of TCP/IP networking, application protocols, and network security.

Pay Range: $95,800-$145,000

Please note that the salary range above is a guideline, and individual total compensation will vary based on factors such as qualifications, skill level, competencies, and work location.

Skills & Education

This list includes key skills used in this job but is not inclusive of all skills needed for the role. Please see any required education below.

Cloud Infrastructure, Cloud Security, DevSecOps

Work Arrangement

Shipt considers candidates located near a Shipt office or workspace in Birmingham, San Francisco, or Minneapolis to be hybrid, which means that they have the flexibility to work from home (with leader approval) or at a Shipt office in order to facilitate the ability to innovate, collaborate, and spark team connections. In-office expectations will vary by role and leader. Certain roles may require in-office presence on a full-time basis. Please work with your recruiter to learn more about the classification of this role.

About Shipt

Shipt is a retail tech company that connects people to reliable, high-quality delivery with a personal touch. Shipt connects customers to the things they want from the stores they love, retail businesses to more satisfied customers, and workers to new earning opportunities.

At Shipt, we aim to put our team first to boost a sense of belonging, spark opportunities for growth, provide unique benefits and commit to giving back to our communities in ways that make life better, both personally and professionally. We understand that our service, our culture, and our connection to our communities are only made better by every single person who shows up to work here every day. Learn More.

Shipt is an independently operated, wholly owned subsidiary of Target Corporation and available in more than 5,000 U.S. cities. Shipt was founded and is headquartered in Birmingham, Alabama. For more information, please visit Shipt's company site at Shipt.com.

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, color, national origin, ethnicity, religion or religious belief, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender, gender identity, gender expression, transgender status, sexual stereotypes, age, military or veteran status, disability, or any other characteristic protected by law.

Please inform your recruiting contact upon initial connection if you need a reasonable accommodation. If you need assistance filling out a job application, please complete this form.

Employees (and eligible family members) are covered by medical, dental, vision and more. Employees may enroll in our company's 401k plan. Employees will also be eligible to receive discretionary vacation for exempt team members, paid holidays throughout the calendar year and paid sick leave. Other compensation includes eligibility for an annual bonus and the potential for restricted stock units based on role.