Principal Security -   IR / DevSecOps  Engineer

Remote (US-based)

ABOUT ENGINEERING

Our team is made up of people from varied backgrounds, including engineers who built and scaled organizations like Google, Netflix, eBay, GitHub, and LivingSocial. We build modern software with modern techniques like TDD, continuous delivery, DevOps, and service-oriented architecture. Cross-functional partnerships are deeply meaningful to us and are how we’ve built up immense trust with the people running the business.  We focus on high-value products that solve clearly identified problems but are designed in a sustainable way so that value continues to deliver in the long term. In fact, some of our proudest moments come from solving business problems without writing a line of code.

ABOUT THE ROLE

We are a CLOUD 1st environment.  Stitch Fix is looking for a Principal IR / DevSecOps to help with security initiatives, Incident Response and implementing best practices in the areas of infrastructure, network security, and cloud environments, as well as compliance and policy.

 

The individual in this role will be part of the Security Team and work closely with the various Platform and Development teams. The candidate should have strong experience with Incident Response, container technologies, and deployment and integration patterns in a production AWS environment. 

 

Our team members are given a great deal of autonomy in the pursuit of keeping Stitch Fix secure, and the successful candidate will demonstrate strong communication skills. They should be comfortable and productive, working independently, partnering with a larger, highly distributed engineering team.

 

We’re looking specifically for folks who emphasize usable security. Stitch Fix is a fast-growing company, and our security program needs to be able to keep pace with that growth while not disrupting innovation. 

REQUISITE SKILLS AND EXPERIENCE

 

Your skills are broad - building, deploying, and maintaining security services in an organization, and serving as the Subject Matter Expert for cloud security throughout the development lifecycle.

• At least 5+ years in Security, preferably in an Incident Response role or similar “first responder” role (Trust and Safety, Fraud, Account Protection, etc) 
• AWS Experience is a MUST
• Demonstrated experience with common logging software (Splunk, SumoLogic, Datadog or similar)
• Demonstrated experience with EDR solutions (Crowdstrike, etc) 
• Understanding of common adversarial tools and techniques and IOCs (Indicators of Compromise) preferred
• Demonstrated capability to follow and drive response outcomes
• Strong ability to be calm “under fire” and drive solutions in a time-sensitive environment when under stress or urgency
• Strong written communication skills when completing post-mortems
• Ability to partner and demonstrate soft skills to influence outside of the Security organization and encourage cooperation and resolution during security events
• Strong experience with AWS security services (Security Hub, GuardDuty, Macie, etc.)
• Capable of working with common CI/CD technologies
• Knowledge of common development practices and tools
• Experience with Docker
• Experience with Infrastructure as Code
• Mentoring junior developers and security engineers
• Minimum of 6 years supporting production AWS environments

ABOUT THE TECHNOLOGY

Technologies we rely on to pursue solutions to business problems include:

 

• Ruby on Rails
• Golang
• CircleCI
• Docker
• AWS / ECS
• HashiCorp Terraform
• Python 
• Jira
• AWS / Lambda
• DataDog
• CrowdStrike 

 

Even if you already have experience with these tools, you'll have the chance to get even better with them. And if you don't already use at least a few of these tools, we will help you learn and become effective with them.

WE ARE EXCITED ABOUT YOU BECAUSE...

• YOU ARE ENTHUSIASTIC ABOUT SECURITY. You will collaborate to build interesting security solutions using the appropriate tools and contribute to design and architecture across multiple systems. You want to build on your experience and help us to adopt new technologies. You'll learn from us, and we'll learn from you. You care deeply about the fighting to secure our clients and our employees from threats. 

• YOU ARE INTERESTED IN BEING A FIRST RESPONDER. You should strongly believe that every second matters during a security event or inci