Senior Software Engineer, CorpSec
Core
Architect and build scalable security services, automate code security quality gates, and manage identity infrastructure to protect Lyft's systems and user data.
Role type
Senior IC security engineer (application & identity security)
Builds
Automated security tooling, authentication/authorization systems, and identity lifecycle management pipelines
Domain
Transportation technology / Application security / Identity and Access Management (IAM)
Deliverable
production ML models | product features | infrastructure
Required skills
Software engineering (Python, Go, Java, Swift), Identity and Access Management (IAM), OAuth 2.0, OIDC, SAML, SCIM, JWT, Penetration testing, Threat modeling, Code review automation, Computer networking, Network security architecture
Preferred skills
Experience with Okta, Duo Security, Microsoft Entra ID, Shell scripting, iOS/Android security
Technologies
Python, Go, Java, Swift, Objective C, Okta, Duo Security, Microsoft Entra ID, OAuth 2.0, OIDC, SAML, SCIM, JWT
Responsibilities
Architect and build services that improve system security with scalability in mind; Partner with IT to design and maintain authentication and authorization systems; Own the security posture of identity infrastructure including SSO, MFA, and access provisioning; Conduct penetration testing, code review, and breach readiness; Proactively research new attack vectors; Research and implement automated code security quality gates; Share knowledge through tech talks and evangelize best practices.
Seniority
Senior, hands-on IC
