Staff Security Software Engineer - Lime

Job Title: Staff Security Software Engineer
Job Location: United States
Job Listing URL: https://jobs.lever.co/lime/3682de7d-6b74-4d6c-a277-8f647f909362
Job Description: Lime is the world's largest shared electric vehicle company. We’re on a mission to build a future where transportation is shared, affordable and carbon-free. Our electric bikes and scooters have powered 400+ million rides in 250+ cities on 5 continents, replacing an estimated 100+ million car trips. Named a Time 100 Most Influential Company and Fast Company Brand That Matters, we achieved a fully profitable year in 2022, becoming the first in our industry to reach this milestone.

Lime is hiring a Staff Security Software Engineer to join our Security team! In this role, you will help us revolutionize the way people move around cities. You’ll design, develop, and implement security, privacy, fraud, and resiliency solutions following the NIST framework. You'll develop and maintain incident response plans, improve security-related standards and processes, and mentor and train junior engineers.

The ideal candidate will have experience working in an evolving startup environment. You will be an in-the-moment problem solver with the ability to think about the short term and long term plan. You're energized about building and scaling and being part of a forward-thinking organization.
What you'll do:
Design and maintain robust security guardrails and standards by all Lime teams. The tech stack includes Ruby on Rails, Go, C, Typescript, Javascript, Kotlin, Swift, and IaC.
Scrutinize and reason clearly about the technology and architecture choices we make.
Anticipate challenges and influence the technical direction of Lime to execute the technology vision
Deconstruct and simplify problems to stakeholders.
Improve Lime’s infrastructure following modern security practices for cloud-native application development.
Design and implement Security/privacy controls and features to protect user data and comply with privacy regulations and standards.
Build robust solutions to address account takeover and service abuse issues.
About you:
10+ years of combined industry experience with at least 5 years of Software development experience and a track record of building impactful security products or systems.
Experience with setting up monitoring, metrics & reporting systems for fine-grained observability and actionable alerting
Strong understanding and experience with relevant threats and the corresponding attack patterns, techniques, mindset, and types of vulnerabilities that an attacker may exploit, and defense techniques to mitigate them of application and infrastructure security (Ruby on Rails, Go, C, Typescript, Javascript, Kotlin, Swift, and IaC). Fluency in any three is required.
Strong understanding of cloud-native application development.(Web, Mobile, Cloud, IoT, Firmware). Fluency in any two is required.
Proficient and able to write high-quality code in any one language (python, golang, typescript, Ruby, Javascript, Kotlin, Swift, etc)
Ability to communicate risks, priorities, and the reasoning behind those decisions to partners, peers, and customers.
Owner’s mindset. You're a self-starter and get things across the finish line.
Strong collaborator. You understand cross-functional strategies and involve key stakeholders in decision-making.

Preferred experience:
Contribution to Open-source security tooling and automation.
Experience speaking at security conferences.
Experience designing and deploying security products in the critical path of a consumer-facing product is preferred.