Skip to content

Software Engineer
Company | Lyft |
---|
Location | Seattle, WA, USA |
---|
Salary | $128000 – $160000 |
---|
Type | Full-Time |
---|
Degrees | |
---|
Experience Level | Junior, Mid Level |
---|
Requirements
- Solid experience with a high level programming language (bonus points for experience with Python, Go-lang and shell scripts)
- Experience with (or a deep interest in) computer security
- When facing a problem that’s poorly defined or outside of your expertise, you can quickly learn what you need to dig in, make sense of the problem, and start working towards a solution
- You’re a great communicator, and can advocate for your proposals while also empathizing with your teammates’ goals and priorities
- You understand that security work must be prioritized because all teams have finite resources. You have good judgment and a sense of when to compromise and when to hold your ground
- Understanding of computer network security or major computer networking protocols (e.g. TCP/IP, HTTP, TLS, DNS).
Responsibilities
- Architect and build services that improve the security of our systems with an eye towards scalability and avoiding unnecessary friction.
- Evangelize our shared security responsibility model by collaborating with other Infrastructure teams at Lyft to ensure that our services and workflows are secure by default.
- Work on embedding security best practices such as least privilege, isolation, monitoring, authentication and authorization across our infrastructure
- Develop critical services that Lyft depends on such as our credential management service that provides secrets to all our services at Lyft.
- Provide rich data to engineers at Lyft to drive manual and automated decision making by working on our open-source service Cartography, which shows relationships between our infrastructure assets.
- Ensuring least privilege is enforced by improving role-based access control and Identity Access Management for our users and services.
Preferred Qualifications
- Experience with Amazon Web Services (AWS) or any other major cloud service provider
- Kubernetes and container security and running fleets of endpoints or servers in the cloud.
- Cryptography, PKI, or key distribution
- Running multi-tier or distributed web applications at scale