SIGN IN
Staff Security Engineer jobs in United States
cer-icon
Apply on Employer Site
company-logo

Chewy · 1 day ago

Staff Security Engineer

Chewy is seeking a hands-on Principal Cybersecurity Engineer to join our technology organization. This role involves designing, building, and evolving security capabilities across large-scale, cloud-native systems, while also influencing security outcomes across multiple teams.
E-CommercePetRetail
check
H1B Sponsor Likelynote

Responsibilities

Design, review, and contribute to security architectures and implementations across cloud, application, data, and platform layers
Own and evolve core security engineering capabilities (e.g., cloud security patterns, workload identity, network segmentation, secrets management, data protection) from design through production
Develop and maintain threat models, security requirements, and architectural guardrails for distributed systems running on public clouds
Partner directly with engineering teams to embed security into system design and code, not as an after-the-fact review function
Define and implement secure-by-default patterns that teams can adopt without centralized friction
Lead technical decision-making for high-risk, high-impact security tradeoffs, including incident learnings and architectural remediation
Build and refine security engineering standards, reference architectures, and reusable components, and actively ensure they are implemented correctly
Diagnose and resolve the most complex security failures and design flaws in production systems
Establish measurable security outcomes (not just controls), and track progress against them
Mentor engineers by reviewing designs, code, and implementations, raising the bar through direct technical engagement
Influence hiring by setting clear expectations for senior and principal-level engineering excellence, and participating directly in interview loops

Qualification

AWS securityKubernetes/EKS securityCybersecurity engineeringDistributed data systemsInfrastructure-as-codeSecurity architectureMentoring engineersIncident responseTechnical communication

Required

Bachelor's degree or equivalent practical experience in computer science or engineering
15+ years of engineering experience, with substantial hands-on work in cybersecurity engineering and architecture
Demonstrated experience building and operating security controls in production, not just designing or recommending them
Deep, practical expertise in securing AWS environments, including IAM, networking, compute, and managed data services
Strong hands-on experience with Kubernetes/EKS security, including pod/workload identity, network policies, and runtime controls
Proven experience securing distributed data systems, including DynamoDB and PostgreSQL-based platforms
Ability to read, review, and meaningfully influence production code and infrastructure-as-code
Track record of owning security outcomes across multiple teams through influence rather than direct authority
Experience turning ambiguous risk and business requirements into concrete technical designs and implementations
Strong written and verbal communication skills, with the ability to explain complex technical decisions to senior engineers and leadership
Comfortable operating in environments with incomplete information, evolving requirements, and real operational risk

Preferred

Prior experience securing high-scale e-commerce or consumer-facing platforms
Experience building self-service security platforms or guardrails used by multiple engineering teams
Strong infrastructure-as-code background (e.g., Terraform) with security-first design
Experience integrating security into CI/CD pipelines and developer workflows
History of leading or significantly contributing to post-incident architectural improvements

Benefits

401k
New hire and annual equity grant
Medical/Rx
Vision
Dental
Life
Disability
Hospital indemnity
Critical illness
Accident
Parental leave
Family services benefits
Backup dependent care
Flexible spending accounts
Telemedicine
Pet adoption reimbursement
Employee assistance program
10% off pet insurance
20% off at Chewy.com
Unlimited PTO, subject to manager approval
Six paid holidays per year
Paid sick and family leave in compliance with applicable state and local regulations

Company

Chewy is a pet store that offers products, services, supplies, and prescriptions for pet parents and partners with online services.

H1B Sponsorship

Chewy has a track record of offering H1B sponsorships. Please note that this does not guarantee sponsorship for this specific role. Below presents additional info for your reference. (Data Powered by US Department of Labor)
Distribution of Different Job Fields Receiving Sponsorship
Represents job field similar to this job
Trends of Total Sponsorships
2025 (250)
2024 (164)
2023 (223)
2022 (305)
2021 (189)
2020 (161)

Funding

Current Stage
Public Company
Total Funding
$951M
Key Investors
Lone Pine CapitalWells Fargo Capital FinanceBlackRock
2024-09-19Post Ipo Secondary· $500M
2019-06-13IPO
2017-04-18Acquired

Leadership Team

leader-logo
Satish Mehta
CTO
linkedin
leader-logo
Michael Hyman
Vice President
linkedin
Company data provided by crunchbase