Senior Software Engineer, CorpSec
Core
Architect and build scalable security services, automate code security quality gates, and manage identity infrastructure to protect Lyft's systems and user data.
Role type
Senior Software Engineer, Application Security & Identity
Builds
Automated security tooling, authentication/authorization systems, and identity lifecycle management pipelines
Domain
Transportation technology, Cloud Security, Identity and Access Management (IAM)
Deliverable
production ML models | product features | infrastructure
Required skills
Software engineering (Python, Go, Java, Swift), Identity and Access Management (IAM), OAuth 2.0, OIDC, SAML, SCIM, JWT, Penetration testing, Threat modeling, Code review automation, Computer networking, Network security architecture
Preferred skills
Experience with Okta, Duo Security, Microsoft Entra ID, Shell scripting, iOS/Android security
Technologies
Python, Go, Java, Swift, Objective C, Okta, Duo Security, Microsoft Entra ID, OAuth 2.0, OIDC, SAML, SCIM, JWT
Responsibilities
Architect and build services that improve system security with scalability in mind; Partner with IT to design and maintain authentication and authorization systems; Own the security posture of identity infrastructure including SSO and MFA; Conduct penetration testing, code review, and breach readiness; Proactively research new attack vectors; Research and implement automated code security quality gates
Seniority
Senior, hands-on IC
