Staff AppSec Engineer

| San Francisco
Sorry, this job was removed at 4:08 a.m. (PST) on Thursday, July 1, 2021
Find out who's hiring in San Francisco.
See all Cybersecurity + IT jobs in San Francisco
Apply
By clicking Apply Now you agree to share your profile information with the hiring company.

We're Cruise, a self-driving service designed for the cities we love.

We’re building the world’s most advanced, self-driving vehicles to safely connect people to the places, things, and experiences they care about. We believe self-driving vehicles will help save lives, reshape cities, give back time in transit, and restore freedom of movement for many.

Cruisers have the opportunity to grow and develop while learning from leaders at the forefront of their fields. With a culture of internal mobility, there's an opportunity to thrive in a variety of disciplines. This is a place for dreamers and doers to succeed.

If you are looking to play a part in making a positive impact in the world by advancing the revolutionary work of self-driving cars, join us.

The Application Security team at Cruise focuses on partnering with groups throughout the company to create and deliver applications and services that are secure. Our work includes audits such as code reviews, threat models and application assessments; building a partnership with engineering teams in defining security related requirements and providing input on design proposals.  The team also creates libraries, tools, and practices which allow us to scale our work to cover an increasingly large and complex code base.

We are especially interested in speaking with candidates that have diverse backgrounds and perspectives. We’re solving novel security problems at Cruise; novel perspectives make this easier! 

We are ok with remote work!

What you’ll be doing:

  • Lead the long term technical strategy of an engineering focused security team responsible for ensuring Cruise applications and services are developed securely
  • Perform reviews ranging from architectural design to threat modeling and source code level assessments, providing actionable recommendations to make our products more secure
  • Collaborate closely with engineering and security teams on security focused code reviews and implementation of security best practices in essential systems
  • Communicate security risks and recommendations effectively with technical and non-technical audiences through verbal and written communications that focus on actionable and measurable improvements
  • Advocate for security within the engineering organization in order to deliver the most secure autonomous vehicle platform
  • Be capable or prioritizing security efforts as well as help teams understand prioritization of performing security mitigation work

What you must have:

  • Extensive experience in the application security space; securing complex interconnected web applications and their architectures using Golang, Python and/or Node.js
  • A track record of developing projects from design to implementation and maintenance
  • Experience securing native mobile(Android/iOS) and/or C/C++ applications in a Linux environment
  • A broad and practical understanding of security fundamentals and their application
  • Experience using a variety of static and dynamic security tools
  • Practical knowledge and experience working in public cloud environments & IAM solutions (AWS, GCP, etc.)
  • An interest in building creative solutions to challenging security problems with a focus on mentorship and scaling the team’s impact

Bonus points!

  • Contributions to the security community (open source, public research, blogging, presentations, etc)
Why Cruise?
  • Our benefits are here to support the whole you:
    • Competitive salary and benefits 
    • 401(k) Cruise matching program 
    • Medical / dental / vision, AD+D and Life
    • One Medical membership
    • Flexible vacation and company paid holidays
    • Healthy meals and snacks provided for non-remote employees
    • Paid parental leave
    • Fertility Benefits 
    • Dependent Care Flexible Spending Account, subsidized by Cruise
    • Flexible Spending Account 
    • Monthly wellness stipend
    • Pre-tax Commuter Benefit Plan for non-remote employees
  • We’re Integrated
    • Through our partnerships with General Motors and Honda, we are the only self-driving company with fully integrated manufacturing at scale.
  • We’re Funded
    • GM, Honda, Microsoft, SoftBank, & T. Rowe Price, have invested billions in Cruise. Their backing for our technology demonstrates their confidence in our progress, team, and vision and makes us one of the leading autonomous vehicle organizations in the industry. Our deep resources greatly accelerate our operating speed.
  • We’re Independent
    • We have our own governance, board of directors, equity, and investors. Our independence allows us to not just work on the edge of technology, but also define it.
  • We’re Vested
    • You won’t just own your work here, you’ll have the potential to own equity in Cruise, too. We are competing in a market that is projected to grow exponentially, which gives our company valuation room to grow.

Cruise LLC is an equal opportunity employer. We strive to create a supportive and inclusive workplace where contributions are valued and celebrated, and our employees thrive by being themselves and are inspired to do the best work of their lives. 

We seek applicants of all backgrounds and identities, across race, color, ethnicity, national origin or ancestry, citizenship, religion, sex, sexual orientation, gender identity or expression, veteran status, marital status, pregnancy or parental status, or disability. Applicants will not be discriminated against based on these or other protected categories or social identities. Cruise will consider for employment qualified applicants with arrest and conviction records, in accordance with applicable laws.

Cruise is committed to the full inclusion of all applicants. If reasonable accommodation is needed to participate in the job application or interview process please let our recruiting team know or email [email protected].

We proactively work to design hiring processes that promote equity and inclusion while mitigating bias. To help us track the effectiveness and inclusivity of our recruiting efforts, please consider answering the following demographic questions. Answering these questions is entirely voluntary. Your answers to these questions will not be shared with the hiring decision makers and will not impact the hiring decision in any way. Instead, Cruise will use this information not only to comply with any government reporting obligations but also to track our progress toward meeting our diversity, equity, inclusion, and belonging objectives.

Note to Recruitment Agencies: Cruise does not accept unsolicited agency resumes. Furthermore, Cruise does not pay placement fees for candidates submitted by any agency other than its approved partners.

Read Full Job Description
Apply Now
By clicking Apply Now you agree to share your profile information with the hiring company.

Technology we use

  • Engineering
  • People Operations
    • JavaLanguages
    • MatlabLanguages
    • PythonLanguages
    • SqlLanguages
    • C Languages
    • Google HangoutsCollaboration
    • SlackCollaboration
    • ZoomCollaboration

Location

Our sleek, modern offices in San Francisco's SoMa neighborhood include catered meals, an on-site gym and stunning city views from our roof decks.

What are Cruise Perks + Benefits

Cruise Benefits Overview

A job at Cruise is meaningful. Your work on all-electric, self-driving vehicles will save lives, help the planet, and make cities better. It’s something to be proud of. It’s career-defining work. When you’re building something that’s never been done before, it’s important to feel safe — safe to experiment, safe to fail, safe to share, and safe to express yourself. At Cruise, we’re committed to the safety, inclusivity, and professional development of our employees from the recruiting process through retirement — and every professional milestone along the way. In addition to professional development perks, Cruise offers a range of robust medical, family and wellness benefits that ensure you and your family feel supported, safe, and healthy—whether working onsite or working from home.

Culture
Volunteer in local community
Partners with nonprofits
OKR operational model
Team based strategic planning
Open office floor plan
Flexible work schedule
Remote work program
Diversity
Dedicated diversity and inclusion staff
Mandated unconscious bias training
Diversity employee resource groups
Cruise Community Groups include: AAPI, Chai-paani, Cruisers of the African Diaspora, Empowering Women of Cruise, Families at Cruise, Latinx, LGBTQruise, Middle Easterners @ Cruise, and Veterans.
Health Insurance & Wellness Benefits
Flexible Spending Account (FSA)
Disability insurance
Dental insurance
Vision insurance
Health insurance
Life insurance
Wellness programs
Mental health benefits
Financial & Retirement
401(K)
401(K) matching
Company equity
We’ve developed a unique Recurring Liquidity Opportunity that gives Cruisers the potential upside of a private company and the liquidity of a public company.
Performance bonus
Child Care & Parental Leave Benefits
Generous parental leave
Family medical leave
Company sponsored family events
Vacation & Time Off Benefits
Unlimited vacation policy
Generous PTO
Paid holidays
Paid sick days
Office Perks
Commuter benefits
Company-sponsored outings
Free daily meals
Free snacks and drinks
Company-sponsored happy hours
Recreational clubs
Home-office stipend for remote employees
Onsite gym
Professional Development Benefits
Job training & conferences
Lunch and learns
Promote from within
Mentorship program
Continuing education stipend
Online course subscriptions available

More Jobs at Cruise

Apply Now
By clicking Apply Now you agree to share your profile information with the hiring company.
Learn more about CruiseFind similar jobs like this