Senior Security Engineer - Cloud & Infrastructure

About The Opportunity 
We’re all about connecting hungry diners with our network of over 300,000 restaurants nationwide. Innovative technology, user-friendly platforms and streamlined delivery capabilities set us apart and make us an industry leader in the world of online food ordering. When you join our team, you become part of a community that works together to innovate, solve problems, grow, work hard and have a ton of fun in the process!

Why Work For Us 

Grubhub is a place where authentically fun culture meets innovation and teamwork. We believe in empowering people and opening doors for new opportunities. If you’re looking for a place that values strong relationships, embraces diverse ideas–all while having fun together–Grubhub is the place for you!

Grubhub Security is dedicated to delivering tailored solutions that provide a secure and trustworthy experience for our users and over 31.5 million customers. We are committed to upholding the highest standards of security and compliance across our operations. Our team values innovation, integrity, and a proactive approach to safeguarding our digital assets. 

More About The Role:

We are looking for a highly skilled Senior Cloud and Infrastructure Cybersecurity Engineer to lead the design, implementation, and enhancement of our cloud and infrastructure security controls. The ideal candidate will possess deep expertise in cloud platforms, Infrastructure as Code (IaC), and automation, playing a crucial role in developing and standardizing security solutions that align with industry best practices while supporting our engineering organization’s focus on building new capabilities. 

The Impact You Will Make:

• Ensure that Grubhub’s key business initiatives are delivered securely by implementing robust cloud and infrastructure security controls. 
• Drive consistency in Grubhub’s security practices through the development of IaC standards, templates, and processes, enabling secure and scalable deployments. 
• Build and automate solutions that enhance the security, hygiene, and operational readiness of our cloud services. 
• Collaborate with Production Infrastructure, Corporate IT, and cross-functional teams to introduce, improve, and maintain security controls, directly contributing to the scalability and security of our infrastructure. 
• Design and implement proactive measures to handle and prevent security incidents, mitigating risks and improving our overall security posture. 
• Write performant and concise code that meets Grubhub's defined standards, review peer code, and ensure the security and scalability of the features you develop. 
• Assist team members in creating a backlog of technical debt and features, suggesting areas for improvement and enhancement. 
• Actively work with team members, providing technical mentorship and guidance while fostering a security-first engineering culture. 
• Design, implement, and continually improve cloud and infrastructure security controls, ensuring alignment with industry best practices. 
• Develop and manage Infrastructure as Code (IaC) standards, templates, and processes to maintain consistency and enforce security policies. 
• Automate security solutions for cloud services, configurations, and infrastructure components, ensuring compliance and operational efficiency. 
• Conduct cloud security assessments and audits, identifying and mitigating vulnerabilities, misconfigurations, and compliance gaps. 
• Collaborate with engineering teams to integrate security testing into CI/CD pipelines, streamlining security processes and improving operational excellence. 
• Stay current with emerging trends, tools, and technologies in cloud security, integrating new approaches into our security practices. 
• Provide mentorship to junior engineers, promoting technical excellence and a collaborative work environment. 

What You Bring To The Table

• Bachelor’s degree in Computer Science, Information Technology, or a related field; an advanced degree is preferred. 
• Minimum of 5 years of experience in cloud and infrastructure security, with expertise in cloud platforms (AWS, GCP) and Infrastructure as Code (Pulumi, Terraform). 
• Proficiency in programming and scripting languages such as Python, with a proven track record in building and automating cloud security solutions. 
• Familiarity with DevSecOps practices and CI/CD pipeline integrations. 
• Experience with containerization and orchestration technologies (e.g., Docker, Kubernetes). 
• Strong understanding of attack vectors, exploits, and mitigations, especially within cloud infrastructure environments. 
• Excellent communication and collaboration skills, with the ability to convey technical concepts to non-technical stakeholders. 
• Strong analytical and problem-solving abilities, with attention to detail and the ability to manage multiple priorities in a dynamic environment. 
• Proven ability to work effectively in a fast-paced, dynamic environment while managing multiple priorities simultaneously. 

Got These? Even Better

• Strong understanding of security compliance frameworks (e.g., CIS, NIST, ISO 27001) and regulatory compliance requirements (e.g., PCI DSS, GDPR, HIPAA) relevant to cloud environments.
• Experience in building and deploying cloud security automation tools and frameworks. 
• Industry certifications such as CCSP, CompTIA Cloud+, or CISSP. 
• Familiarity with cloud security posture tools and methodologies to identify vulnerabilities in cloud-native services and configurations. 

And Of Course, Perks!

• Flexible PTO. Grubhub employees enjoy a generous amount of time to recharge.
• Health and Wellness. Excellent medical, dental and vision benefits, 401k matching, employee network groups and paid parental leave are just a few of our programs to support your overall well-being.
• Free Meals. Our employees get a weekly Grubhub credit to enjoy
• Social Impact. We believe in giving back through programs like the Grubhub Community Relief Fund, and provide our employees opportunities to support causes that are important to them.

Grubhub is an equal opportunity employer. We welcome diversity and encourage a workplace that is just as diverse as the customers we serve. We evaluate qualified applicants without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, disability, veteran status, and other legally protected characteristics. If you’re applying for a job in the U.S. and need a reasonable accommodation for any part of the employment process, please send an email to TalentAcquisition@grubhub.com and let us know the nature of your request and contact information. Please note that only those inquiries concerning a request for reasonable accommodation will be responded to from this email address.  

If you are a resident of the State of California and would like a copy of our CA privacy notice, please email privacy@grubhub.com.