Senior Security Software Engineer Ii

We're Cruise, a self-driving service designed for the cities we love.

We’re building the world’s most advanced self-driving vehicles to safely connect people to the places, things, and experiences they care about. We believe self-driving vehicles will help save lives, reshape cities, give back time in transit, and restore freedom of movement for many.

In our cars, you’re free to be yourself. It’s the same here at Cruise. We’re creating a culture that values the experiences and contributions of all of the unique individuals who collectively make up Cruise, so that every employee can do their best work.

Cruise is committed to building a diverse, equitable, and inclusive environment, both in our workplace and in our products. If you are looking to play a part in making a positive impact in the world by advancing the revolutionary work of self-driving cars, come join us. Even if you might not meet every requirement, we strongly encourage you to apply. You might just be the right candidate for us.

The Privacy Engineering & Data Protection team aims to make Cruise a leader in self-driving consumer privacy. Cruise launched its self-driving ridehail service earlier in 2022, and we are quickly scaling; this an opportunity to influence the direction for privacy & data security at a company in its early stages of commercialization!

We are seeking candidates with software engineering chops, eager to learn about security & privacy, and excited to be on the cutting edge of self-driving technology. This Security Software Engineer will be working with Privacy Engineers, Security Engineers, and teams across the company to scale core tooling and infrastructure. The focus will be on our in-house platform for scanning, mapping, and tagging sensitive data across Cruise systems. This tooling is crucial for visibility into data lineage across Cruise, applying controls to sensitive data, and validating/enforcing these controls. You’ll also be working to make storage and processing data safe by default—empowering teams to protect user’s data.

We’re looking for someone who’s comfortable in uncharted territory as we build unique privacy technologies to maintain user trust. We need your skills and passion to make it happen. Candidates could work in the office (if SF- or Seattle-based) or remotely.

What you’ll be doing

• Investigating potential risks identified via data discovery/mapping tool, working independently to sample data, explore risks technically, engage data owners, and propose a path forward for managing the risk.
• Participating in team’s planning, code reviews, and design discussions leading to continuous improvements in these areas.
• Creating, deploying, and analyzing our infrastructure through infrastructure-as-code tools, (e.g., Terraform).
• Collaborating with Detection & Response to mature privacy-related detections and alerts of anomalous handling of data, unexpected access, etc.
• Developing and maintaining features across current-generation and next-generation Privacy infrastructure.
• Driving new features in Cruise’s unified privacy metadata platform to automate data governance requirements like Data Subject Access Requests, deletion, and retention periods.
• Collaborating with Cruise’s Privacy Infrastructure team to mature/expand the scope for Cruise’s data discovery, mapping, and tagging tool.

What You Must Have

• Ability to communicate and collaborate across subject areas (e.g. engineering, legal, policy).
• Candidates must have the ability to maintain and report against a work plan, and provide updates and status reports given scope and objectives.
• Proficiency in Python.
• Familiarity with full stack web application development—ideally with a modern framework like Django, Flask, or Rails.
• Bachelor's degree in Computer Science or a similar technical field or equivalent practical experience. At least 3 years working experience as a software engineer or software developer or in a related field.
• Perseverance and negotiation skills with a track record of achieving good user outcomes.
• Experience with the lifecycle of custom web application development, from requirements gathering to implementation, launch, and ongoing operation.
• Code maintenance and review experience in one or more general purpose languages.
• Experience with the software development lifecycle.
• Familiarity with other languages or interest in learning (e.g., Go, C++).
• Proficiency writing SQL queries & understanding of modern data warehousing.
• Excited to be on the cutting edge of data security & privacy problems. Motivated to protect individuals’ privacy (does not need to have experience with privacy or security).
• Experience—or at a minimum, interest in—basic front-end development.

The salary range for this position is $168,000 - $247,000. Compensation will vary depending on location, job-related knowledge, skills, and experience. You may also be offered a bonus, restricted stock units, and benefits. These ranges are subject to change.

Why Cruise?

• Flexible Spending Account
• We have our own governance, board of directors, equity, and investors. Our independence allows us to not just work on the edge of technology, but also define it.
• Pre-tax Commuter Benefit Plan for non-remote employees
• You won’t just own your work here, you’ll have the potential to own equity in Cruise, too. We are competing in a market that is projected to grow exponentially, which gives our company valuation room to grow. We offer a new kind of equity program called Recurring Liquidity Opportunity (RLO), which combines IPO-like liquidity with the stability of remaining private - learn more about RLO here
• Flexible vacation and company paid holidays
• Competitive salary and benefits
• Medical / dental / vision, AD+D and Life
• We’re Vested
• Paid parental, jury duty, bereavement, family care, and medical leave
• CruiseFlex, a working policy for US-Based Cruisers, lets you and your manager find the working style that’s best for you, whether it’s primarily in-person, primarily at home, or a combination of home and in-office time. - learn more about CruiseFlex here
• Subsidized mental health benefits
• Our benefits are here to support the whole you:
• We’re Integrated
• Healthy meals and snacks available for non-remote employees
• Dependent Care Flexible Spending Account
• We’re Funded
• Fertility Benefits
• We’re Independent
• 401(k) Cruise matching program
• Through our partnerships with General Motors and Honda, we are the only self-driving company with fully integrated manufacturing at scale.
• GM, Honda, Microsoft, T. Rowe Price, and Walmart have invested billions in Cruise. Their backing for our technology demonstrates their confidence in our progress, team, and vision and makes us one of the leading autonomous vehicle organizations in the industry. Our deep resources greatly accelerate our operating speed.

• We integrate #staysafe, our top priority at Cruise, into our everyday work. Through our Safety Management System, every Cruiser is asked to do their part by reporting any potential issues or hazards they observe and making continuous improvements. You’ll be able to contribute to safety at Cruise, no matter your job function or title.
• We’re Safety Conscious

Cruise LLC is an equal opportunity employer. We strive to create a supportive and inclusive workplace where contributions are valued and celebrated, and our employees thrive by being themselves and are inspired to do the best work of their lives. We seek applicants of all backgrounds and identities, across race, color, caste, ethnicity, national origin or ancestry, citizenship, religion, sex, sexual orientation, gender identity or expression, veteran status, marital status, pregnancy or parental status, or disability. Applicants will not be discriminated against based on these or other protected categories or social identities. Cruise will consider for employment qualified applicants with arrest and conviction records, in accordance with applicable laws.

Cruise is committed to the full inclusion of all applicants. If reasonable accommodation is needed to participate in the job application or interview process please let our recruiting team know or email [email protected].

We proactively work to design hiring processes that promote equity and inclusion while mitigating bias. To help us track the effectiveness and inclusivity of our recruiting efforts, please consider answering the following demographic questions. Answering these questions is entirely voluntary. Your answers to these questions will not be shared with the hiring decision makers and will not impact the hiring decision in any way. Instead, Cruise will use this information not only to comply with any government reporting obligations but also to track our progress toward meeting our diversity, equity, inclusion, and belonging objectives.

Candidates applying for roles that operate and remotely operate the AV: Licensed to drive a motor vehicle in the U.S. for the three years immediately preceding your application, currently holding an active in-state regular driver’s license or equivalent, and no more than one point on driving record. A successful completion of a background check, drug screen and DMV Motor Vehicle Record check is also required.

Note to Recruitment Agencies: Cruise does not accept unsolicited agency resumes. Furthermore, Cruise does not pay placement fees for candidates submitted by any agency other than its approved partners.