At Five Below our growth is a result of the people who embrace our purpose: We know life is way better when you are free to Let Go & Have Fun in an amazing experience, filled with unlimited possibilities, priced so low, you can always say yes to the newest, coolest stuff! Just ask any of our over 27,000 associates who work at Five Below and they’ll tell you there’s no other place like it. It all starts with our purpose and then, The Five Below Way, which is our values and behaviors that each and every associate believes in.
It’s all about culture at Five Below, making this a place that can inspire you as much as you inspire us with big ideas, super energy, passion, and the ability to make the workplace a WOWplace!
POSITION SUMMARY:
We are seeking a Sr. Security Engineer with a focus on cloud and application security to join our team as a hands-on individual contributor. This role is responsible for designing, implementing, and operating security controls that protect our e-commerce platforms and other enterprise technology environments.
The ideal candidate can take high-level security requirements and translate them into practical, scalable solutions in partnership with infrastructure, engineering, and product management teams. This individual will play a key role in strengthening our security posture across cloud platforms, application development pipelines, and customer-facing systems.
Success in this role requires strong technical execution, cross-functional collaboration, and the ability to operate as a generalist across multiple security domains. A proactive mindset, strong organizational skills, clear communication, and an appetite for continuous learning are essential.
RESPONSIBILITIES:
-
Operate and enhance security solutions protecting customer-facing omnichannel commerce platforms, including web application firewalls (WAF), bot mitigation, and API security controls
-
Drive improvements in cloud security posture across Azure and AWS environments using CSPM/CNAPP tooling, and implement scalable governance and security controls
-
Build, integrate, and mature application security capabilities, including SAST, DAST, and SCA, embedding them into CI/CD pipelines and developer workflows (“shift-left” security)
-
Partner with engineering, infrastructure, and product teams to implement secure solutions and ensure alignment with enterprise security standards
-
Act as a security subject matter expert within enterprise initiatives, providing guidance and oversight for control implementation and risk reduction
-
Drive the implementation and ongoing enhancement of security-owned tools and capabilities to reduce risk and improve analyst visibility
-
Serve as an escalation point for internal security operations, supporting detection tuning, incident response, and threat analysis
-
Develop and maintain automation (scripts, workflows, integrations) to improve the efficiency and consistency of security control deployment and enforcement
-
Continuously evaluate emerging threats, technologies, and industry practices to enhance security capabilities and address evolving risks
ESSENTIAL QUALIFICATIONS:
-
Strong understanding of network and application security technologies, including WAF, CDN, API security, and bot mitigation
-
Experience securing cloud environments (primarily Azure and AWS), with the ability to implement controls programmatically and at scale
-
Familiarity with cloud security tooling such as CSPM/CNAPP platforms and cloud-native security controls
-
Understanding of modern software development practices, including CI/CD pipelines, containerization, and microservices architectures
-
Experience integrating security tools (SAST, DAST, SCA) into development workflows and supporting “shift-left” security initiatives
-
Proficiency in scripting or automation (e.g., PowerShell, Python, or similar) to support security engineering and operations
-
Strong communication and organizational skills, with the ability to work effectively across technical and non-technical teams
-
Ability to operate independently with minimal oversight while managing multiple priorities
PREFERRED QUALIFICATIONS:
-
Experience with technologies such as Cloudflare, CrowdStrike (EDR/Cloud Security), BlackDuck/Snyk/GitHub Security, GitHub Enterprise, and SIEM platforms
-
Understanding of identity and access management practices and implementation of IAM controls
-
Familiarity with vulnerability management programs and tooling
-
Exposure to operating within or managing multi-cloud environments
-
Experience securing or evaluating AI/ML-based solutions in an enterprise environment
-
Background in infrastructure engineering or software development
Explore our benefits site to discover all the perks and support we offer! From health coverage to financial and personal wellness, we've got you covered—check it out today! benefits.fivebelow.com/public/welcome
Five Below is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, age, national origin, disability, protected veteran status, gender identity or any other factor protected by applicable federal, state, or local laws.
Five Below is committed to working with and providing reasonable accommodations for individuals with disabilities. If you need a reasonable accommodation because of a disability for any part of the employment process, please submit a request and let us know the nature of your request and your contact information. crewservices.zendesk.com/hc/en-us/requests/new
BE AWARE OF FRAUD! Please be aware of potentially fraudulent job postings or suspicious recruiter activity by persons that are posing as a Five Below recruiters. Please confirm that the person you are working with has an @fivebelow.com email address. Additionally, Five Below does NOT request financial information or payments from candidates at any point during the hiring process. If you suspect fraudulent activity, please visit Five Below's Career Site to verify the posting. fivebelow.com/info/careers
