Lyft13.02.2026
Senior Software Engineer, CorpSec
Зарплата не указана
Mexico City
Обязанности
- 01Architect and build services that improve the security of our systems with an eye towards scalability and avoiding unnecessary friction
- 02Partner with IT and infrastructure teams to design, build, and maintain performant authentication and authorization systems that balance security with user experience
- 03Own the security posture of identity infrastructure, including SSO implementations, MFA strategies, access provisioning workflows, and identity lifecycle management
- 04Share knowledge by giving brown bags, tech talks, and evangelizing appropriate tech and engineering best practices
- 05Collaborate with teams across Lyft to ensure security best practices are leveraged as we roll out new features and expand our service offerings
- 06Conduct penetration testing, code review and breach readiness across our online and mobile infrastructure
- 07Proactively research new attack vectors that may affect Lyft
- 08Research and implement automated code security quality gates
- 09Build and maintain relationships with key partners both internally and externally
Требования
- 015+ years of software engineering experience with a high level programming language
- 023+ years of experience with computer security (or a deep interest in)
- 03Identity and Access Management (IAM) security experience with platforms such as Okta, Duo Security, Microsoft Entra ID (Azure AD), or similar identity providers
- 04Experience securing identity protocols and standards (OAuth 2.0, OIDC, SAML, SCIM, JWT)
- 05When facing a problem that's poorly defined or outside of your expertise, you can quickly learn what you need to dig in, make sense of the problem, and start working towards a solution
- 06You're a great communicator, and can advocate for your proposals while also empathizing with your teammates' goals and priorities
- 07You understand that security work must be prioritized because all teams have finite resources. You have good judgment and a sense of when to compromise and when to hold your ground
- 08Self-motivated with ability to work independently with minimal supervision
- 09Threat modeling, code review, penetration testing against cloud environments and/or mobile (IOS/Android)
- 10Conduct code review against one or many of the following languages
- 11Development skills to automate code security assessments
- 12Computer networking concepts and protocols, application and network security methodologies
- 13Network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth)
- 14Present findings, recommendations and results to leadership
- 15Ability to communicate complex information, concepts, or ideas in a confident and well-organized manner through verbal, written, and/or visual means
- 16Ability to manage multiple tasks and priorities
- 17Ability to work independently with minimal supervision
- 18Please submit your resume in English