> Markdown version of [/jobs/ext/1314502-security-engineer](https://www.wearedevelopers.com/jobs/ext/1314502-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Engineer

- **Company:** Shipt, Inc.
- **Location:** Birmingham, AL, United States (Remote available)
- **Experience:** Expert
- **Salary:** $95,800.0 - $180,000.0
- **Contract:** Permanent contract
- **Skills:** JavaScript (Programming Language), Application Firewall, CompTIA Security+, Cyber Security, Computer Programming, Programming Tools, Python (Programming Language), Cloud Services, Software Engineering, TypeScript, Software Security, GWAPT, Containerization, Infrastructure Automation Frameworks, Free and Open-Source Software, Api Design, Terraform
- **Published:** July 17, 2026
- **Apply:** https://www.dice.com/job-detail/b31b88a7-e916-46f7-bc0e-7671f4f7ef9e

## About the Role

* You have extensive software engineering experience with focus on developer tooling or infrastructure
 * 5+ years programming skills in Go, Python, and/or JavaScript/TypeScript
 * Experience with WAF
 * You have familiarity with containerization concepts and tools
 * You have experience working and deploying with cloud platforms
 * You have experience building APIs, automation tools, and developer-facing services
 * You have experience with Infrastructure as Code tools, such as Terraform
 * You have strong system design and architecture skills
 * You have experience translating business requirements into practical development solutions
 * You have led the design, implementation, and validation of secure coding practices, application security controls, and integration of security platforms.
 * You have an understanding of tools and techniques leveraged to breach networks, server systems, cloud workloads or applications

Nice to Haves:

 * You have a CISSP, OSWE, CSSLP, GWAPT, GWEB, OSCP, CompTIA Security+ certification
 * You have familiarity with open-source software and dependency management
 * You have experience managing, configuring and troubleshooting CDN & WAF technologies, Application Security, Python (Programming Language), Web Application Firewall (WAF)Bachelor's Degree or equivalent experience | Required

## Description

As a Staff Engineer on our Application Security team, you will be instrumental in leading and driving secure practices across Shipt. You'll be responsible for development practices across our engineering organization and building software systems to make secure development easier. In this role, you will design, implement, and scale security controls and processes that protect Shipt's users, empower Shipt developers, ensure the safety of our applications, and protect user data. As a Staff Engineer, you are expected to operate at a high level of technical proficiency, provide technical leadership, mentor other team members, and influence security culture at all levels of the company.

If you are enthusiastic about cybersecurity, enjoy sharing your knowledge, and thrive on personal and professional growth, you're exactly the kind of engineer we're looking for. Our Shipt Cybersecurity team is growing, and we're looking for talented individuals who can work both independently and collaboratively, with a passion for mentoring and developing their colleagues. You will gain valuable experience collaborating with cross-disciplinary teams, contributing to the protection of customers and shoppers nationwide, To foster connection while offering continued flexibility, hybrid team members have the following in-office expectations:

Hybrid roles in Birmingham, AL typically work in-office at least 2 days per week, with core in-office days on Wednesdays and Thursdays.

Hybrid roles in Minneapolis, MN typically work in-office at least 1 day per week on either Tuesday, Wednesday, or Thursday.

Hybrid roles in San Francisco, CA typically work in-office at least 1 day per week between Monday and Thursday.

Certain roles may require in-office presence on a full-time basis. Please work with your recruiter to learn more about the classification of this role.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [API Design - Getting Started](https://www.wearedevelopers.com/videos/33-api-design-getting-started)
- [Infrastructure as Code: The Developer's Secret Weapon](https://www.wearedevelopers.com/videos/1221-infrastructure-as-code-the-developer-s-secret-weapon)
- [Securing Your Web Application Pipeline From Intruders](https://www.wearedevelopers.com/videos/53-securing-your-web-application-pipeline-from-intruders)
- [Rest API Antipatterns](https://www.wearedevelopers.com/videos/100208-rest-api-antipatterns)
- [Implementing Feature Environments with AWS and Terraform](https://www.wearedevelopers.com/videos/531-implementing-feature-environments-with-aws-and-terraform)

## Related Articles

- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)