Posted in

Software Engineer

Software Engineer

CompanyLyft
LocationSeattle, WA, USA
Salary$128000 – $160000
TypeFull-Time
Degrees
Experience LevelJunior, Mid Level

Requirements

  • Solid experience with a high level programming language (bonus points for experience with Python, Go-lang and shell scripts)
  • Experience with (or a deep interest in) computer security
  • When facing a problem that’s poorly defined or outside of your expertise, you can quickly learn what you need to dig in, make sense of the problem, and start working towards a solution
  • You’re a great communicator, and can advocate for your proposals while also empathizing with your teammates’ goals and priorities
  • You understand that security work must be prioritized because all teams have finite resources. You have good judgment and a sense of when to compromise and when to hold your ground
  • Understanding of computer network security or major computer networking protocols (e.g. TCP/IP, HTTP, TLS, DNS).

Responsibilities

  • Architect and build services that improve the security of our systems with an eye towards scalability and avoiding unnecessary friction.
  • Evangelize our shared security responsibility model by collaborating with other Infrastructure teams at Lyft to ensure that our services and workflows are secure by default.
  • Work on embedding security best practices such as least privilege, isolation, monitoring, authentication and authorization across our infrastructure
  • Develop critical services that Lyft depends on such as our credential management service that provides secrets to all our services at Lyft.
  • Provide rich data to engineers at Lyft to drive manual and automated decision making by working on our open-source service Cartography, which shows relationships between our infrastructure assets.
  • Ensuring least privilege is enforced by improving role-based access control and Identity Access Management for our users and services.

Preferred Qualifications

  • Experience with Amazon Web Services (AWS) or any other major cloud service provider
  • Kubernetes and container security and running fleets of endpoints or servers in the cloud.
  • Cryptography, PKI, or key distribution
  • Running multi-tier or distributed web applications at scale