Senior Security Engineer

Shipt•Minneapolis, MN

21h•Hybrid

About The Position

We are actively looking for a Senior Cloud Security Engineer to join our Network and Endpoint Security team. This team plays a crucial role in securing Shipt's applications, endpoints, and cloud infrastructure as well as assisting engineering teams in implementing cybersecurity best practices. As a Senior Cloud Security Engineer you will design and maintain secure cloud network architectures, including extensive use and ownership of CSPM and CNAPP tools, and provide input on secure architecture/design for new services or migrations. You will also develop and maintain custom security tools, automations, and scripts to automate detection, analysis, response processes, and centralize incident response and alerting and support and guide efforts to resolve issues in production environments, including responding to, investigating, and remediating security incidents. Lead and perform formal threat modeling exercises for new and existing cloud services and applications to proactively identify security weaknesses in design and architecture.

Requirements

Minimum of 5 years of on-the-job experience in an information security-focused role, with at least 2 years working with a major cloud provider (GCP/AWS/Azure).
Robust understanding and experience in maintaining mission-critical, resilient, and highly available cloud architectures.
Direct, hands-on experience with Infrastructure-as-Code (e.g., Terraform) and source version control (Git/GitHub).
Experience with creating detailed documentation and architectural diagrams.
Experience with cloud service providers (GCP/AWS/Azure).
Direct, hands-on experience using and securing Kubernetes clusters with advanced knowledge of containerization methodologies.
Experience automating and orchestrating security tasks using REST APIs and/or scripting languages like Python, Bash, and Go.
Experience developing solutions with Agentic Engineering and AI, including responsible usage concepts.
Deep technical knowledge of TCP/IP networking, application protocols, and network security.

Nice To Haves

Cloud Infrastructure
Cloud Security
DevSecOps

Responsibilities

Design and maintain secure cloud network architectures, including extensive use and ownership of CSPM and CNAPP tools.
Provide input on secure architecture/design for new services or migrations.
Develop and maintain custom security tools, automations, and scripts to automate detection, analysis, response processes, and centralize incident response and alerting.
Support and guide efforts to resolve issues in production environments, including responding to, investigating, and remediating security incidents.
Lead and perform formal threat modeling exercises for new and existing cloud services and applications to proactively identify security weaknesses in design and architecture.