Cloud Security Engineer, Stitchfix
$145.5-214k
+ Equity
Online personal styling
Job no longer available
Online personal styling
1001+ employees
Job no longer available
$145.5-214k
+ Equity
1001+ employees
Company mission
To change the way people find clothes they love by combining technology with the personal touch of seasoned style experts.
Role
Who you are
- This role requires expertise in cloud security architecture, DevSecOps automation, application security best practices, and incident response
- You have 7+ years of experience in cloud security, DevSecOps, or application security, with a focus on AWS
- You are an expert in AWS security services such as GuardDuty, Security Hub, Inspector, IAM, KMS, and AWS Organizations
- You have deep experience with Infrastructure as Code (IaC), including Terraform and CloudFormation, to enforce security at scale
- You have a strong understanding of application security principles, including OWASP Top 10, SAST, DAST, and secure SDLC methodologies
- You are proficient in DevSecOps tooling, such as SAST, DAST, SCA, IAST, and container security scanning tools
- Expert-level AWS knowledge: VPC design, IAM, KMS, EKS, Lambda, AWS Organizations
- You have experience securing APIs, microservices, and serverless functions, ensuring proper authentication and authorization
- You are a proactive problem solver, able to diagnose security challenges across both cloud and application layers
- You have excellent communication and collaboration skills, allowing you to effectively advise engineering and product teams on security best practices
What the job involves
- Our Security Architecture team is at the forefront of protecting our cloud infrastructure and applications
- We are responsible for designing and implementing security solutions across cloud environments and application security domains to ensure the protection of sensitive data, prevent security threats, and enable secure innovation
- We work closely with engineering, DevOps, and product teams to integrate security seamlessly into cloud-native architecture, DevSecOps pipelines, and application development workflows
- As a Senior Cloud Security Engineer, you will play a critical role in both cloud security and application security, helping to secure AWS cloud environments, microservices, containers, serverless architectures, and application security pipelines
- You will work closely with the Senior Security Architect and cross-functional teams to develop security solutions that mitigate risk while enabling business and engineering agility
- Design secure cloud and application architectures, ensuring security is embedded in both infrastructure and software development
- Integrate security automation into CI/CD pipelines and enforcing secure coding practices
- Work with engineering and product teams to proactively mitigate application security risks
- Design and manage AWS multi-account environments, ensuring minimal attack surface and robust logging/monitoring
- Implement AWS security best practices, leveraging services like GuardDuty, Security Hub, Inspector, and custom Lambda scripts for continuous threat detection
- Develop secure IaC templates (Terraform/CloudFormation) to enforce consistent security configurations
- Automate security controls to detect misconfigurations, vulnerabilities, and compliance violations (CIS, NIST, PCI-DSS)
- Integrate application security testing (SAST, DAST, SCA, IAST) into CI/CD pipelines to detect vulnerabilities early
- Define secure coding guidelines and collaborate with engineering teams to ensure adherence
- Conduct threat modeling and secure code reviews to proactively mitigate application security risks
- Enforce API security best practices, including OAuth, JWT, rate limiting, and input validation
- Work closely with the Senior Security Architect to align cloud and application security with overarching security standards
- Partner with engineering, DevOps, and product teams to embed security into the SDLC and cloud infrastructure
- Educate development teams on secure coding, application security testing, and cloud security best practices
Our take
Shopping online for clothes is not always a fun experience. Finding clothes you like is only half the battle. Sizing guides and return policies seem to have been designed to be challenging to understand, and can also vary wildly from company to company.
Stitchfix sets out to change this by making online clothes shopping personalized and hassle-free. Customers take a survey on their personal tastes, and pay a one-off fee for a stylist, to receive a box of 5 personalized items. Then, they simply pay for any items they keep, or return what they don't want free of charge. The stylists fee is deducted from the first purchase and if they keep all 5 items, they receive a discount.
Stitchfix's unique blend of technology, and human touch in styling, allows the company to deliver its personalized experience at scale, with its growing data sets putting them in a great place to predict consumer trends and preferences. Unfortunately, the company has been hit hard by the current economic climate - cutting staff back in June 2022 as well as again in early 2023. Only time will tell if this once exciting brand will be able to bounce back from this bump in the road and find success again in the future.
Steph
Company Specialist at Welcome to the Jungle
Insights
-7% employee growth in 12 months
Company
Funding (last 2 of 4 rounds)
Jun 2014
$30m
SERIES C
Oct 2013
$12m
SERIES B
Total funding: $47.6m
Company benefits
- Leadership, managing people program, career journey & other training opportunities
- Company equity for eligible roles
- Medical, dental and vision benefits
- 401(k) plan
- Unlimited vacation for qualified roles
- Competitive parental leave
- Enjoy 40% off of Fixes plus access to quarterly sample sales
- Collaborative workspaces - Open floor plan with standing desks & living room seating throughout
Company HQ
Financial District, San Francisco, CA
Leadership
Katrina Lake
(CEO)BA in Economics from Stanford. MBA from Harvard Business School. Previously 2 years as an Associate at The Parthenon Group and 2 years as an Associate at Leader Ventures.
Share this job
View 5 more jobs at Stitchfix