1 day ago
Responsibilities
- Set direction for cloud infrastructure and production-runtime security and drive measurable risk reduction.
- Identify security gaps, provide architectural guidance and security reviews, and lead prioritized remediation.
- Design, implement, operate, and validate scalable infrastructure security controls in production.
- Build reusable security tooling, self-service patterns, documentation, playbooks, and operational practices.
- Lead threat hunts, tabletop exercises, post-incident reviews, and proactive detection improvements.
- Initiate complex security projects, coordinate stakeholders, and integrate security roadmaps with company priorities.
- Research emerging threats and technologies and translate findings into practical security improvements.
- Communicate security concepts and tradeoffs to technical partners, non-technical stakeholders, and senior leadership.
- Mentor engineers through pairing, code reviews, technical guidance, and knowledge sharing.
Requirements
- Experience as a technical security leader in a large-scale, complex, cloud-based environment.
- Deep expertise securing cloud infrastructure at scale, including infrastructure as code, identity and access management, and Kubernetes.
- Experience designing and operating infrastructure security controls through production adoption and measuring their effectiveness.
- Experience building and operating production security tooling, with fluency in at least one programming language and ability to work with cloud APIs and Kubernetes configuration.
- Ability to assess attack surfaces adversarially, perform proactive threat work, and close security gaps before exploitation.
- Track record of independently delivering complex security initiatives and influencing senior stakeholders.
- Ability to collaborate during high-stress situations, manage competing priorities, and exercise sound judgment.
- Ability to use AI for cloud-risk analysis, infrastructure-as-code review, security-control design, and scalable infrastructure-security solutions while validating its outputs.
- Strong accountability for the quality, adoption, and outcomes of security controls and initiatives.
- Familiarity with application-security practices and security threats related to e-commerce is a nice-to-have.
Tech Stack
Categories
About Shopify
Shopify is a leading global commerce company, providing trusted tools to start, grow, market, and manage a retail business of any size. Shopify makes commerce better for everyone with a platform and services that are engineered for reliability, while delivering a better shopping experience for consumers everywhere. Shopify powers millions of businesses in more than 175 countries and is trusted by brands such as Allbirds, Gymshark, PepsiCo, Staples, and many more. Find all our jobs here: www.shopify.com/careers