Infrastructure Security Manager

Remote - Global
Engineering

About Shopify

Opportunity is not evenly distributed. Shopify puts independence within reach for anyone with a dream to start a business. We propel entrepreneurs and enterprises to scale the heights of their potential. Since 2006, we’ve grown to over 8,300 employees and generated over $1 trillion in sales for millions of merchants in 175 countries.

This is life-defining work that directly impacts people’s lives as much as it transforms your own. This is putting the power of the few in the hands of the many, is a future with more voices rather than fewer, and is creating more choices instead of an elite option.

About you

Moving at our pace brings a lot of change, complexity, and ambiguity—and a little bit of chaos. Shopifolk thrive on that and are comfortable being uncomfortable. That means Shopify is not the right place for everyone.

Before you apply, consider if you can:

Care deeply about what you do and about making commerce better for everyone
Excel by seeking professional and personal hypergrowth
Keep up with an unrelenting pace (the week, not the quarter)
Be resilient and resourceful in face of ambiguity and thrive on (rather than endure) change
Bring critical thought and opinion
Embrace differences and disagreement to get shit done and move forward
Work digital-first for your daily work

About the role

We’re looking for an experienced security leader to join Shopify’s Trust team and take a part in leading our Infrastructure Security team.

Shopify is constantly evolving, and the Trust team has built a safe environment for employees to do their best work without risking our merchants' trust. The Infrastructure Security team builds and manages security tooling to support our varied infrastructure, champions supply chain security, and help guide our engineers to build secure services.

As one of the leads of the Infrastructure Security team, you will be responsible for managing a portion of our engineering team, and supporting a wide range of engineering and security projects.

This is a trailblazing team! You will have the creative freedom to make a real difference and the chance to work with the best talent. Sounds like the place for you? Read on, and we'd love to hear from you!

Responsibilities:

Lead an engineering team tackling varied problems, from developing extensions to our infrastructure layers and building internal tools, to threat hunting and network policies.
Provide direction, mentorship, and support to a team of security engineers with diverse skills and backgrounds.
Use data to define and develop metrics to understand and improve our infrastructure security posture.
Dive into the technical details of problems to understand them deeply and guide your team in the right direction.
Champion the security engineering craft, along with leaders from other Shopify teams.
Act as a security advocate within Shopify.

Qualifications

Strong engineering and security background with a robust security mindset and the ability to write production-ready code.
Proven management and leadership skills, enabling you to develop and mentor others while building credibility with your team and executing broader security strategies.
Familiarity with working with senior stakeholders across the organization, both technical and non-technical, to develop roadmaps, integrate with larger company initiatives, and deliver business and security value.

Nice to have:

Knowledge of and/or experience with: Google Cloud, Kubernetes, Semgrep, Ruby/Rails, Rust, Go, red teaming, threat hunting, PKI, Terraform.
Participating in an on-call rotation.
Familiarity with integrating security practices into the DevOps pipeline to ensure continuous security throughout the development lifecycle.
Understanding and implementation of Zero Trust security models.

We hire people, not resumes. If you think you’re right for the role, apply now.

First things first

We want to ensure you’re the type of person who will thrive here so we can move you quickly through our hiring process. Before completing the job application, please check all the statements that apply to you below:

I am always seeking (often uncomfortable) growth and deepening my craft expertise

I thrive on change in an ambiguous environment and can keep pace to ship weekly

I want to work remotely for my daily work

Application

Name*

Email*

Resume*

Linkedin Profile*

Location*

Start typing and select a location from the dropdown.

Do you have the right to work in your listed location?

Please confirm you've read and agree with our candidate NDA

NDA here

Please confirm you've read our applicant privacy notice

Privacy notice here

Have you been a people manager in a past role?

Has your career primarily been in an engineering role? Note, we don't think this is a role for Technical Program Managers. If that's you, please check out Shopify's openings in this field.

Think of a spectrum, with heavy eng (SRE, prod-eng type background) at one end and heavy security (pen test, IR/blue team, secops) at the other. With your skills and experience, where are you on this spectrum? Our team has both, so there's no wrong answer here!

There's a lot of stakeholder management in this job and translating technical achievements to the real risk that it reduces. Is this something you've been tasked to do in your career? (if it is, we'll definitely be asking you about it!)

Help us understand you better! Any conference talks, blog posts, github projects etc that you think we should take a look at or know about? Put them here if so.

This is a people manager role, not a technical lead. Can you help us understand why that aspect of it speaks to you?