Security Engineer II (Cloud Security)
Remote
Full Time
#Information Security
#Cloud Security
#Azure Active Directory
#Python
#PowerShell
#SIEM
#IAM
#RBAC
#OAuth
#SAML
#MITRE
#Trust
As a member of the ShipBob Team, you will...
- Grow with an Ownership Mindset: We champion continuous learning and innovation. You'll take on real problems, create tangible solutions, and drive results that move the needle for ShipBob, our merchants, and for your own professional growth. If you're ready to do the most meaningful work of your career, this is the place.
- Collaborate with Peers and Leaders Alike: At ShipBob, leaders are accessible; feedback flows in both directions, and everyone, regardless of their seniority or role, steps up to help when needed. We hold each other to high standards because we trust each other to meet them. That combination of transparency and mutual respect is what makes the work here feel worth doing.
- Experience a High-Performance Culture and Clear Purpose: We are results-driven and clear about what that means: our goals are specific, accountability is shared, and every team member can see how their work connects to our mission. When we hit milestones, we celebrate them together. When we fall short, we learn and move forward.
Location: Remote - India
Shift Timings: US Hours 7 pm- 4 am IST
Role Description:
As a Security Engineer II, you will play a pivotal role in ShipBob’s Information Security and Governance, Risk, and Compliance programs. You will design, implement, and maintain access control and threat detection solutions, participate in risk assessments and audits, and collaborate across teams to ensure the confidentiality, integrity, and availability of our critical data and systems. You will also support monitoring and detection, vulnerability assessments and incident response for ShipBob. This role reports to the Vice President, Information Tech & Security.
What you’ll do:
- Monitor security alerts, investigate incidents, and escalate as needed across security tools.
- Support SIEM and detection (Sentinel, Defender XDR), tuning alerts and improve detections.
- Assist vulnerability management program by working with IT/Engineering and other app developers by providing security expertise, tracking remediation and ensuring SLA compliance.
- Help manage identity security including conditional access, PIM, MFA, RBAC, risky sign-ins, and access reviews.
- Maintain security documentation and collect evidence.
- Develop and automate security workflows, playbooks, and tools to improve the efficiency and effectiveness of security operations.
- Develop, enforce, and update security policies, procedures, and guidelines for access control, threat detection, and compliance with standards such as ISO 27001, SOC 2, PCI, NIST CSF, and Sarbanes-Oxley.
- Communicate risks and vulnerabilities to stakeholders, document remediation plans, and proactively share information with management.
- Build and execute regular threat hunting campaigns focused on current, emerging, and obscure tactics, techniques, and procedures.
- Proactively search for, identify, and analyze new and existing techniques to detect advanced and targeted threats.
- Utilize advanced threat hunting techniques to detect anomalies and suspicious activities.
- Collaborate with security team members, developers, operations, and stakeholders to share knowledge and best practices.
- Identify process improvements and provide actionable guidance.
- Perform other duties as assigned.
What you’ll bring to the table:
- 4+ years of hands-on work experience with security architecture and engineering in a cybersecurity operations program.
- 2+ years of experience in incident response, detection, threat intelligence, or access control security engineering roles.
- Excellent knowledge and experience with access control frameworks and tools (IAM, RBAC, ABAC, OAuth, SAML), cloud security, network security, endpoint security, and threat intelligence.
- In-depth knowledge of Azure services (especially Azure Active Directory, Azure AD Identity Protection, Azure RBAC), and experience securing cloud-based infrastructures (Azure, M365, Google Workspace, Salesforce).
- Proficiency in scripting languages such as Python, PowerShell, Go, or Bash.
- Strong knowledge of industry-standard frameworks (MITRE ATT&CK, ISO 27001, SOC 2, NIST CSF, PCI, SOX, GDPR).
- Proven ability to manage multiple risk and compliance projects.
- Strong written and verbal communication; effective collaborator with outstanding interpersonal skills.
- Excellent analytical and problem-solving skills supporting business objectives.
- Detail-oriented, organized, and able to balance precision with big-picture thinking.
- Quick learner who proactively drives personal and professional growth.
- Demonstrated initiative and ownership in problem-solving.
- Strong design and solution implementation skills for Zero Trust Architecture.
- Desire to solve response challenges with automation.
- Security+, CISSP, CISA, CISM, CRISC, GCIA, GCIH, GREM, or similar certifications preferred; equivalent experience accepted.
Perks & Benefits:
- Medical, Term & Accidental Insurance
- All Purpose Leave (casual & sick time): 12 days
- Earned Leave: 15 days
- Public Holiday: 12 days
- Generous Maternity & Paternity Leave
- Quarterly Wellness Day
- Work From Home Allowance
- See Our High-Performing Culture >>> Check us out on Instagram (@lifeatshipbob)
#LI-VA1
We recognize that people come with a wealth of experience and talent beyond just the technical requirements of a job. If your experience is close to what you see listed here, please still consider applying. Diversity of experience and skills combined with passion is a key to innovation and excellence; therefore, we encourage people from all backgrounds to apply to our positions.
About You:
Building the world’s leading full-stack fulfillment platform is challenging work. The problems we solve are complex, the pace is fast, and the bar is high. That means ShipBob’s environment isn’t the right fit for everyone, and that’s okay. If you are ready to take ownership, push boundaries, and grow alongside a team that genuinely supports each other, we would love to hear from you.
Learn more about our core values and how we perform at a high level in our day-to-day work on our Culture page (https://www.shipbob.com/careers/culture/).
About Us:
ShipBob is a leading global supply chain and fulfillment technology platform designed for SMB and Mid-Market ecommerce merchants to provide them access to best-in-class capabilities and to deliver a delightful shopper experience. Merchants can outsource their entire fulfillment operations, utilize ShipBob’s proprietary warehouse management system for in-house fulfillment, or take advantage of a hybrid solution across ShipBob’s dozens of fulfillment center network in the United States, Canada, United Kingdom, Europe, and Australia. ShipBob is backed by leading investors like Menlo Ventures, Bain Capital Ventures, Hyde Park Venture Partners, and SoftBank Vision Fund 2, and is one of the fastest-growing tech companies headquartered in Chicago.
At ShipBob, every full-time employee gets access to our best-in-class AI and productivity tools from Day 1 at no cost. This isn't a pilot or a perk for select teams. It's standard for everyone. We believe innovation isn't owned by one department. Whether you're in Talent, Operations, Finance, Engineering, or Customer Success, we expect you to ask: how can this be done better, faster, or smarter? These tools are our investment in your ability to find those answers.
We may use AI-powered tools during our interview process to support things like notetaking and organizing feedback so our teams can stay focused on getting to know you. These tools help create a more consistent and thoughtful experience. That said, every hiring decision is made by a human.
ShipBob provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.
This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.
There is no deadline to apply for this position, as ShipBob accepts applications on an ongoing basis.
