DevSecOps Engineer – eCommerce Platform

Chicago, IL

Who we are:

Our story might surprise you. We’re the world’s largest restaurant company—encompassing KFC, Pizza Hut, and Taco Bell—but there’s a lot more going on behind the scenes than just frying chicken, baking pizzas, and serving up tacos. We put this delicious food in the hands of customers through apps, websites, kiosks, POS, and other digital dining experiences – and we are only getting started. Here in Chicago, we’re building out a bold team of hackers to help Yum! Brands deliver the next generation of software to 49,000 restaurants in more than 145 countries. That’s a huge responsibility, which is why we’re on a mission to find the most fearless engineers to join our software startup within Yum!.

Yum!'s vision for the future is simple: a world with more Yum!: with our iconic brands in more places, and more ways for consumers to access them. The key and not-so-secret ingredient in our recipe for growth is our unrivaled talent and culture, which fuels our results. And like all companies who win consistently, our brands, employees, and franchisees will need to continually adjust to stay relevant now and in the future. The software we’re building does just that: it serves people in new ways to make team members more productive and customers happier.

What we need:

Our dynamic eCommerce Platform team is rapidly growing as we optimize our digital ordering channels and technology innovations to create competitive advantages for our restaurants around the globe. We are seeking a DevSecOps Engineer who can craft globally scalable and secure solutions that will drive the next generation of our business.

You will:

• Collaborate with similar minded technology enthusiasts by providing security insights in systems architecture design
• Work diligently to inject security practices into the software delivery life cycle while maintaining a rapid pace of developer productivity
• Analyze security threat vectors early the development process
• Actively analyze and manage issues on our platform before they impact customers
• Be a key player in improving operational maturity though producing long term fixes from issues identified from on-call rotation
• Partner with Yum security teams to align DevSecOps practices and jointly maintain Yum’s industry leading privacy and security standards

You have:

• A BS degree in Computer Science or related field, or equivalent work experience
• 5+ years with cybersecurity in cloud environments
• Experience with standards and compliance (HIPAA, ISO-27002, PCI, NIST, GDPR, CCPA)
• Previous experience leading application threat modeling and vulnerability assessments for distributed systems
• Comfort with securing a production container ecosystem (Docker, EKS, Fargate/ECS, Kubernetes, service discovery, service registry) in a continuous delivery environment
• A proven track record of securely architecting and owning cloud platforms such as (AWS, GCE, Azure) using Infrastructure as Code techniques
• Experience with running security tools such as vulnerability scanners and static code analyzers
• Programming and scripting fundamentals (Python, Javascript, etc.)
• The ability to solve problems by working with team members to resolve large scale production issues
• Hands-on technical skills in modern application deployment, NoSQL databases, content delivery networks, web application firewalls, network analysis tools, and other distributed systems technologies

A few of our perks:

• 4 weeks of vacation PLUS holidays
• 5 sick days
• 2 paid volunteer days
• 401k matching
• Medical, dental, vision
• Life insurance
• Half day Fridays
• Generous parental leave
• A world-famous recognition culture