Staff Application Security Engineer

Job title: Staff Application Security Engineer

About the Role

As a Staff Engineer on our Application Security team, you will be instrumental in leading and driving secure practices across Shipt. You’ll be responsible for development practices across our engineering organization and building software systems to make secure development easier. In this role, you will design, implement, and scale security controls and processes that protect Shipt’s users, empower Shipt developers, ensure the safety of our applications, and protect user data. As a Staff Engineer, you are expected to operate at a high level of technical proficiency, provide technical leadership, mentor other team members, and influence security culture at all levels of the company.

If you are enthusiastic about cybersecurity, enjoy sharing your knowledge, and thrive on personal and professional growth, you're exactly the kind of engineer we're looking for. Our Shipt Cybersecurity team is growing, and we're looking for talented individuals who can work both independently and collaboratively, with a passion for mentoring and developing their colleagues. You will gain valuable experience collaborating with cross-disciplinary teams, contributing to the protection of customers and shoppers nationwide.

What You'll Do

• Lead design, implementation, and scaling of security controls and developer-facing tooling to enable secure development across Shipt.

• Provide technical leadership, mentorship, and influence security culture at all levels of the company; collaborate with cross-disciplinary teams.

• Architect and build APIs, automation tools, and developer-facing services to improve secure development practices.

• Translate business requirements into practical security solutions and guide the integration of security platforms.

• Design, implement, and validate secure coding practices, and ensure robust application security controls.

• Partner with teams to protect customers and shoppers nationwide by improving security across products and platforms.

• What We're Looking For

• Extensive software engineering experience with a focus on developer tooling or infrastructure.

• 5+ years programming skills in Go, Python, and/or JavaScript/TypeScript.

• Experience with Web Application Firewalls (WAF).

• Familiarity with containerization concepts and tools.

• Experience deploying and operating on cloud platforms.

• Experience building APIs, automation tools, and developer-facing services.

• Experience with Infrastructure as Code tools (e.g., Terraform).

• Strong system design and architecture skills.

• Ability to translate business requirements into practical development solutions.

• Led design, implementation, and validation of secure coding practices, application security controls, and integration of security platforms.

• Understanding of tools and techniques used to breach networks, server systems, cloud workloads, or applications.

• Nice to Have

• CISSP, OSWE, CSSLP, GWAPT, GWEB, OSCP, or CompTIA Security+ certification.

• Familiarity with open-source software and dependency management.

• Experience managing, configuring, and troubleshooting CDN & WAF technologies.

• Compensation & Benefits

• Salary range: USD 95,800 – 180,000 per year.

• Benefits include medical, dental, vision, and more; 401(k) plan; discretionary vacation for exempt team members; paid holidays; and paid sick leave.

• About Shipt

• Shipt is a retail tech company that connects people to reliable, high-quality delivery with a personal touch. Shipt is a wholly owned subsidiary of Target Corporation and operates in thousands of U.S. cities. We are an equal opportunity employer and value diversity at our company.