About Shift:

We believe car buying should be fun, fair, and accessible to everyone. We’ve set out to transform an industry, using technology to bring transparency and convenience to the car buying process.

And we aren’t stopping there. We seek to bring that same openness and simplicity to car ownership too, with payments, maintenance, and insurance in one easy app. At Shift, we’re building the tools that empower people to buy, own, and sell the cars that make life go. 

About the role:

The Application and Infrastructure Security Engineer reports to the Head of Technical Operations and is a highly experienced and knowledgeable security professional. They have experience working as an security engineer within software development organizations, and have influenced application design and development practices.

The ideal candidate will have implemented, used, and maintained Security Processes and Tools for a business with over 200 employees, including secure development and deployment practices, management of secure credentials, and vulnerability scanning. They will also have security-relevant knowledge about major programming languages such as Ruby, Go, Python, and major development frameworks used with those languages. Strong experience with AWS is expected. This candidate will be an expert communicator with stakeholders across the business - both technical and non-technical.

What you'll do:

• Lead and contribute to vulnerability management, security code reviews, penetration testing, and other security programs.
• Help us improve our software development pipeline, development practices, and data governance through adaptation of best practices to meet our business needs.
• Evaluate new ideas or tools in order to evolve our ability to keep Shift and its customers safe - protecting both our business and everyone around it.
• Work with different teams and lead engineers to establish new policies and procedures that will ensure a more secure environment that meets Shift and industry requirements.

What we ask for:

• 3+ years experience working in DevOps, Security, Systems Administration or Software Engineering.
• 3+ years experience securing production infrastructure in AWS.
• 2+ years of experience implementing and using security tools, such as Hashicorp Vault, SAST/DAST, Intrusion Detection, SIEM, Web Application Firewalls and Vulnerability Scanners.
• Strong understanding of web service fundamentals, such as HTTP/S, SSL/TLS, DNS, TCP/UDP, performance monitoring, caching, load balancing and logging.
• Experience assessing security risks for technology products and software development, and working with product management to protect business operations and data belonging to the company and its customers
• Experience with penetration testing, forensic analysis, and incident management.
• 2+ years Linux/UNIX server OSes
• 2+ years Mac and Windows desktop OSes
• Excellent written and verbal communication skills and ability to communicate concisely with technical and non-technical staff across the business
• Demonstrates excellent team and cross-functional collaboration, exhibiting professionalism and empathy for other functional groups within the business
• Experience using agile methodologies to plan and track project work

What will set you apart:

• Strong technical understanding of the modern software development lifecycle and Continuous Integration, Continuous Deployment and Containerization (Docker, Kubernetes)
• Experience working with Software and SaaS vendors through trials, new implementations, renewals, and decommissioning
• Experience with Google Cloud Platform
• Experience with compliance frameworks such as CCPA, PCI, SOC2, SOX, ITGC

Who We Are

At Shift, we’re all about growth - which means people who are eager to grow, who are ready to roll up their sleeves and learn new things. We were founded by a scrappy group of visionaries who were by no means “car experts” - so we don’t expect you to be one, either!

We’ll take the open-minded go-getter over the pure subject matter expert any day. In that spirit, we also care about building a diverse and inclusive workplace and company. To put it simply, cars are meant for everyone, so we believe our company should be, too. We never discriminate against any candidate on the basis of gender, sexual orientation, gender identity, age, race, ethnicity, religion, color, national origin, marital status, veteran status or disability status. We welcome and encourage people of all backgrounds and walks of life to apply, even if you’re unsure if you meet all the requirements. (Even if this particular role isn’t the right fit, chances are we will have the right one soon!)

Why Join Now? 

Having gone public in October 2020, we are at the beginning of our journey and hope you join us for the ride! Shift is a leading end-to-end auto e-commerce platform transforming the used car industry with a technology-driven, hassle-free customer experience. Shift’s mission is to make buying or selling a used car fun, fair, and accessible to everyone. 

We provide comprehensive, digital solutions throughout the car ownership lifecycle: finding the right car, having a test drive brought to you before buying the car, a seamless digitally-driven purchase transaction including financing and vehicle protection products, an efficient, digital trade-in/sale transaction, and a vision to provide high-value support services during car ownership. 

Website | Facebook | Instagram | Twitter | LinkedIn | About Shift (Team)

Shift is an Equal Employment Opportunity Employer

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability and protected veterans status or any other characteristic protected by law.