At Lyft, our purpose is to serve and connect. We aim to achieve this by cultivating a work environment where all team members belong and have the opportunity to thrive.

Lyft connects people to transportation to change the way we live and get around our communities. Lyft’s engineering team is growing rapidly, and we are looking for Software Engineers with a passion in Security to help us scale. Come be part of the Security team at Lyft focused on enabling and empowering engineering teams to deliver secure services at scale.

Our drivers and passengers entrust Lyft with their personal information and travel details to get where they're going and expect us to keep that data safe. Lyft's security team leads efforts across the company to ensure our systems are secure and worthy of our users' trust.

Lyft Security builds systems to protect and defend infrastructure. We consult with teams as they build and launch new products and features, proactively plan for the unexpected, and respond to incidents that occur. Our work has company wide impact and takes place at all levels of the stack, from infrastructure to web application security, as well as mobile apps, IT, bikes and scooters. We believe in scaling security through engineering fundamentals, automation, and tooling. Check out our blog posts at https://eng.lyft.com/tagged/security  to learn more about some of the things we’ve built.

Corporate Security serves as a trusted partner, advisor, and enabler for Enterprise Security at Lyft by meeting and anticipating needs as the company evolves.

Responsibilities:

• Partner cross functionally to design and enforce secure processes that empower Lyft employees
• Help establish roadmaps and prioritize projects based on stakeholders’ needs
• Write well-crafted, well-tested, readable, and maintainable code
• Participate in code reviews to ensure code quality and distribute knowledge
• Share your knowledge by giving brown bags, tech talks, and promoting appropriate tech and engineering best practices
• Supporting and improving our existing detection pipelines
• Lead large projects from idea to successful execution
• Unblock, support and communicate with internal partners to achieve results

Experience:

• 5+ years of software engineering or security engineering industry experience
• Solid experience with a high level programming language (bonus points for experience with Python, Go-lang and shell scripts)
• Exposure to Database technologies including NoSQL (e.g., DynamoDB, Redis, Elasticsearch, etc.)
• Experience (or deep interest in) working with security systems
• Understanding of computer network security or major computer networking protocols (e.g. TCP/IP, HTTP, TLS, DNS).
• Nice to haves: 
• Experience with Amazon Web Services (AWS) or any other major cloud service provider
• Kubernetes and container technology experience
• Experience with Okta, Google Workspace, and other identity and productivity platforms commonly found in enterprise SaaS environments
• Experience leveraging AI to automate security workflows

Benefits:

• Great medical, dental, and vision insurance options with additional programs available when enrolled
• Mental health benefits
• Family building benefits
• Child care and pet benefits
• 401(k) plan with company match to help save for your future
• In addition to 12 observed holidays, salaried team members have discretionary paid time off, hourly team members have 15 days paid time off
• 18 weeks of paid parental leave. Biological, adoptive, and foster parents are all eligible
• Subsidized commuter benefits
• Monthly Lyft credits and complimentary Lyft Pink membership

Lyft is an equal opportunity employer committed to an inclusive workplace that fosters belonging. All qualified applicants will receive consideration for employment without regards to race, color, religion, sex, sexual orientation, gender identity, national origin, disability status, protected veteran status, age, genetic information, or any other basis prohibited by law. We also consider qualified applicants with criminal histories consistent with applicable federal, state and local law.

Lyft highly values having employees working in-office to foster a collaborative work environment and company culture. This role will be in-office on a hybrid schedule — Team Members will be expected to work in the office 3 days per week on Mondays, Wednesdays, and Thursdays. Lyft considers working in the office at least 3 days per week to be an essential function of this hybrid role. Your recruiter can share more information about the various in-office perks Lyft offers. Additionally, hybrid roles have the flexibility to work from anywhere for up to 4 weeks per year. #Hybrid

The expected base pay range for this position in the Seattle area is $136,160 - $170,200, not inclusive of potential equity offering, bonus or benefits. Salary ranges are dependent on a variety of factors, including qualifications, experience and geographic location. Your recruiter can share more information about the salary range specific to your working location and other factors during the hiring process.

At Lyft, our purpose is to serve and connect. We aim to achieve this by cultivating a work environment where all team members belong and have the opportunity to thrive.

Lyft connects people to transportation to change the way we live and get around our communities. Lyft’s engineering team is growing rapidly, and we are looking for Technical Program Managers to help us scale. Come be part of a new team at Lyft focused on enabling and empowering engineering teams to deliver at scale.

Our drivers and passengers entrust Lyft with their personal information and travel details to get where they're going and expect us to keep that data safe. Lyft's security team leads efforts across the company to ensure our systems are secure and worthy of our users' trust.

The security team designs and builds Lyft's security architecture, consult with other teams as they build and launch new products and features, proactively plans for the unexpected, and responds to incidents that occur. Our work affects the entire company and takes place at all levels of the stack, from infrastructure to web application security, as well as mobile apps, IT, and autonomous vehicles. We try to approach security from a software engineering standpoint. We believe in scaling security through automation and tooling and we ship frequently. Check out our blog posts at https://eng.lyft.com/tagged/security to learn more about some of the things we’ve built.

We’re looking for the right person to join our team to perform service and application security review, and move us along our maturity journey. In order to be scalable, each secure product quality gate must be automated and integrated into our software release pipeline. Our grand vision is a fully automated series of quality controls that constantly validate that our code is secure. In short, we’re building a robot army that constantly validates our current security status. Don’t you want to live in this beautiful world?

Responsibilities:

• Architect and build services that improve the security of our systems with an eye towards scalability and avoiding unnecessary friction
• Partner with IT and infrastructure teams to design, build, and maintain performant authentication and authorization systems that balance security with user experience
• Own the security posture of identity infrastructure, including SSO implementations, MFA strategies, access provisioning workflows, and identity lifecycle management
• Share knowledge by giving brown bags, tech talks, and evangelizing appropriate tech and engineering best practices
• Collaborate with teams across Lyft to ensure security best practices are leveraged as we roll out new features and expand our service offerings
• Conduct penetration testing, code review and breach readiness across our online and mobile infrastructure
• Proactively research new attack vectors that may affect Lyft
• Research and implement automated code security quality gates
• Build and maintain relationships with key partners both internally and externally

Experience:

• 5+ years of software engineering experience with a high level programming language (bonus points for experience with Python, Go-lang and shell scripts)
• 3+ years of experience with computer security (or a deep interest in)
• Identity and Access Management (IAM) security experience with platforms such as Okta, Duo Security, Microsoft Entra ID (Azure AD), or similar identity providers
• Experience securing identity protocols and standards (OAuth 2.0, OIDC, SAML, SCIM, JWT)
• When facing a problem that's poorly defined or outside of your expertise, you can quickly learn what you need to dig in, make sense of the problem, and start working towards a solution
• You're a great communicator, and can advocate for your proposals while also empathizing with your teammates' goals and priorities
• You understand that security work must be prioritized because all teams have finite resources. You have good judgment and a sense of when to compromise and when to hold your ground
• Self-motivated with ability to work independently with minimal supervision
• Threat modeling, code review, penetration testing against cloud environments and/or mobile (IOS/Android)
• Conduct code review against one or many of the following languages
• Python
• Go
• Java
• Swift / Objective C
• Development skills to automate code security assessments
• Computer networking concepts and protocols, application and network security methodologies
• Network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth)
• Present findings, recommendations and results to leadership
• Ability to communicate complex information, concepts, or ideas in a confident and well-organized manner through verbal, written, and/or visual means
• Ability to manage multiple tasks and priorities
• Ability to work independently with minimal supervision

Please submit your resume in English.

At Lyft, our mission is to build a more connected world, ride by ride. 

Lyft connects people to transportation to change the way we live and get around our communities. Our drivers and passengers entrust Lyft with their personal information and travel details to get where they are going and expect us to keep that data safe. Lyft’s Privacy team is comprised of engineers and analysts dedicated to ensuring that appropriate data protection measures are applied at all times. We conduct privacy risk assessments, consult with organizational stakeholders, maintain Lyft’s privacy program, develop privacy policies, and advise on all matters related to privacy.

We are looking for a highly motivated, organized, and passionate individual to join our Privacy and Compliance Team. As a member of this team, you will engage in our privacy-by-design process to ensure that privacy and security are built into our products by default.  Every day, you’ll partner with stakeholders across the company working on exciting new projects, help de-risk their product development, conduct risk assessments, and serve as a trusted adviser to teams across Lyft. You’ll help our team stay organized, on track, and ensure both us and teams across Lyft are meeting their strategic goals. 

This role is ideal for someone who thrives on building structure and takes pride in keeping complex, fast-moving programs organized. You're someone who loves building/improving systems, documenting processes so others can follow them, and maintaining visibility across many workstreams at once. You get energized by cross-functional collaboration and find satisfaction in being the connective tissue that helps teams stay aligned, accountable, and moving forward.

Responsibilities:

• Drive operational excellence across the privacy team by streamlining workflows, eliminating redundancies, and building scalable processes that improve team efficiency and output quality
• Develop and track meaningful program metrics to establish accountability, measure effectiveness, and communicate program health to leadership and cross-functional stakeholders
• Build and maintain team expertise in tooling and operations software, ensuring consistent adoption and optimal utilization across the program
• Conduct privacy risk assessments of new and existing Lyft products, services, and processes
• Assess third parties for security and data protection controls, and provide risk assessments and mitigation recommendations
• Support and improve the team’s planning and reporting procedures
• Build strong cross-functional relationships with product and engineering teams and advise them on complex data privacy-related issues
• Communicate risk to both technical and non-technical stakeholders across the business and negotiate risk mitigation strategies
• Develop and maintain internal privacy policies, guidelines, and best practices for Lyft

Experience:

• Knowledge of a broad range of privacy concepts and demonstrated ability to apply them to real-world situations
• Experience conducting privacy risk assessments, third party risk assessments, and and risk mitigation
• Experience with privacy regulations (e.g., CCPA, GDPR, PIPEDA)
• Experience with security compliance frameworks (ISO 27001, PCI-DSS, SOC 2) 
• Experience using Jira for project and task tracking, reporting, and program performance monitoring  
• Experience driving operational improvements within a privacy, security, compliance, or risk function, including process design, metrics development, and tooling adoption
• Strong cross-functional communication and leadership skills, with the ability to initiate and drive projects proactively
• Strong teamwork and collaboration skills
• Strong organizational skills and attention to detail 
• Strong written and verbal communication skills
• Ability to own and manage multiple tasks and high priority projects
• IAPP privacy certifications (e.g., CIPP, CIPM, CIPT) a plus

Benefits:

• Extended health and dental coverage options, along with life insurance and disability benefits
• Mental health benefits
• Family building benefits
• Child care and pet benefits
• Access to a Lyft funded Health Care Savings Account
• RRSP plan with company match to help save for your future
• In addition to provincial observed holidays, salaried team members are covered under Lyft's flexible paid time off policy. The policy allows team members to take off as much time as they need (with manager approval). Hourly team members get 15 days paid time off, with an additional day for each year of service 
• Lyft is proud to support new parents with 18 weeks of paid time off, designed as a top-up plan to complement provincial programs. Biological, adoptive, and foster parents are all eligible.
• Subsidized commuter benefits and Lyft ride credits

Lyft is committed to creating an inclusive workforce that fosters belonging. Lyft believes that every person has a right to equal employment opportunities without discrimination because of race, ancestry, place of origin, colour, ethnic origin, citizenship, creed, sex, sexual orientation, gender identity, gender expression, age, marital status, family status, disability, pardoned record of offences, or any other basis protected by applicable law or by Company policy. Lyft also strives for a healthy and safe workplace and strictly prohibits harassment of any kind.  Accommodation for persons with disabilities will be provided upon request in accordance with applicable law during the application and hiring process. Please contact your recruiter if you wish to make such a request.

Lyft highly values having employees working in-office to foster a collaborative work environment and company culture. This role will be in-office on a hybrid schedule — Team Members will be expected to work in the office at least 3 days per week, including on Mondays, Wednesdays, and Thursdays. Lyft considers working in the office at least 3 days per week to be an essential function of this hybrid role. Your recruiter can share more information about the various in-office perks Lyft offers. Additionally, hybrid roles have the flexibility to work from anywhere for up to 4 weeks per year. #Hybrid

The expected base pay range for this position in the Toronto area is CAD $136,000 - CAD $170,000, not inclusive of potential equity offering, bonus or benefits. Salary ranges are dependent on a variety of factors, including qualifications, experience and geographic location. Your recruiter can share more information about the salary range specific to your working location and other factors during the hiring process.

Lyft may use artificial intelligence to screen applicants, however, Lyft employees make the ultimate selection and hiring decisions.

This job fills an existing vacancy.

At Lyft, our purpose is to serve and connect. We aim to achieve this by cultivating a work environment where all team members belong and have the opportunity to thrive.

Lyft connects people to transportation to change the way we live and get around our communities. Lyft’s engineering team is growing rapidly, and we are looking for Software Engineers with a passion in Security to help us scale. Come be part of the Security team at Lyft focused on enabling and empowering engineering teams to deliver secure services at scale.

Our drivers and passengers entrust Lyft with their personal information and travel details to get where they're going and expect us to keep that data safe. Lyft's security team leads efforts across the company to ensure our systems are secure and worthy of our users' trust.

The security team designs and builds Lyft's security architecture, consults with other teams as they build and launch new products and features, proactively plans for the unexpected, and responds to incidents that occur. Our work affects the entire company and takes place at all levels of the stack, from infrastructure to web application security, as well as mobile apps, IT, and autonomous vehicles. We try to approach security from an engineering standpoint. We believe in scaling security through automation and tooling and we ship frequently. Check out our blog posts at https://eng.lyft.com/tagged/security to learn more about some of the things we’ve built.

The Cloud Security team’s mission is to improve Lyft’s maturity and protect our employees, partners, and intellectual property by architecting and executing on a comprehensive  security model relative to our cloud infrastructure. 

As Staff Software Engineer, you’ll help us build this team and deliver on high impact objectives. This role will drive security reviews, implement detections, remediate findings, implement and enforce least privilege, separation of development environments, secure design, operation, and configuration of our multi-cloud and container environments.

Responsibilities:

• Establish and execute a roadmap for secure cloud architecture 
• Write readable, efficient, and maintainable code
• Design security protocols to secure Cloud infrastructure and Kubernetes at scale
• Lead large projects from inception to implementation
• Unblock, support and communicate with internal partners to achieve results
• Partner with teams across Lyft on organizational security initiatives
• Design and implement cloud security solutions for monitoring, vulnerability remediation, and attack surface analysis and risk reduction
• Collaborate with engineering organizations to build inherently secure cloud architecture solutions
• Exercise sound judgment and thrive in ambiguous situations 

Experience:

• 6+ years of relevant industry experience
• Experience with modern programing languages (e.g., Python, Java, Go) and distributed systems
• Deep expertise with one or more major cloud  service providers like Amazon Web Services (AWS), Google Cloud(GCP), Oracle Cloud, etc
• Expertise in cloud service architecture and cloud security concepts
• Experience with Kubernetes and container security
• Familiarity with securing and hardening Linux hosts
• Able to write clear, scalable and clear design documentation

Benefits:

• Great medical, dental, and vision insurance options with additional programs available when enrolled
• Mental health benefits
• Family building benefits
• Child care and pet benefits
• 401(k) plan to help save for your future
• In addition to 12 observed holidays, salaried team members have discretionary paid time off, hourly team members have 15 days paid time off
• 18 weeks of paid parental leave. Biological, adoptive, and foster parents are all eligible
• Subsidized commuter benefits
• Lyft Pink - Lyft team members get an exclusive opportunity to test new benefits of our Ridership Program

Lyft is an equal opportunity employer committed to an inclusive workplace that fosters belonging. All qualified applicants will receive consideration for employment without regards to race, color, religion, sex, sexual orientation, gender identity, national origin, disability status, protected veteran status, age, genetic information, or any other basis prohibited by law. We also consider qualified applicants with criminal histories consistent with applicable federal, state and local law.

Lyft highly values having employees working in-office to foster a collaborative work environment and company culture. This role will be in-office on a hybrid schedule — Team Members will be expected to work in the office 3 days per week on Mondays, Wednesdays, and Thursdays. Lyft considers working in the office at least 3 days per week to be an essential function of this hybrid role. Your recruiter can share more information about the various in-office perks Lyft offers. Additionally, hybrid roles have the flexibility to work from anywhere for up to 4 weeks per year. #Hybrid

The expected base pay range for this position in the San Francisco Bay area is $176,000 - $220,000, not inclusive of potential equity offering, bonus or benefits. Salary ranges are dependent on a variety of factors, including qualifications, experience and geographic location. Your recruiter can share more information about the salary range specific to your working location and other factors during the hiring process.

At Lyft, our purpose is to serve and connect. We aim to achieve this by cultivating a work environment where all team members belong and have the opportunity to thrive.

Lyft connects people to transportation to change the way we live and get around our communities. Lyft’s engineering team is growing, and we are looking for Engineers  with a passion in Security to help us scale. Come be part of the Security team at Lyft focused on enabling and empowering engineering teams to deliver secure services at scale.

Our drivers and passengers entrust Lyft with their personal information and travel details to get where they're going and expect us to keep that data safe. Lyft's security team leads efforts across the company to ensure our systems are secure and worthy of our users' trust.

The security team designs and builds Lyft's security architecture, consults with other teams as they build and launch new products and features, proactively plans for the unexpected, and responds to incidents that occur. Our work affects the entire company and takes place at all levels of the stack, from infrastructure to web application security, as well as mobile apps, IT, and autonomous vehicles. We try to approach security from an engineering standpoint. We believe in scaling security through automation and tooling and we ship frequently. Check out our blog posts at https://eng.lyft.com/tagged/security to learn about things we’ve built.

The Cloud Security team’s mission is to improve Lyft’s maturity and protect our employees, partners, and intellectual property by architecting and executing on a comprehensive  security model relative to our cloud infrastructure. 

We are seeking a Software Engineer to join our Cloud Security team! As a Senior Software Engineer, you’ll help us define milestones and deliver on high impact objectives. This role will perform security reviews, implement detections, remediate findings, implement and enforce least privilege, separation of development environments, secure design, operation, and configuration of our multi-cloud and container environments.

Responsibilities:

• Establish and execute a roadmap for secure cloud architecture 
• Write readable, efficient, and maintainable code
• Promote appropriate tech and engineering best practices
• Implement  security protocols to secure Cloud infrastructure and Kubernetes at scale
• Drive large projects from inception to implementation
• Unblock, support and communicate with internal partners to achieve results
• Partner with teams across Lyft on organizational security initiatives
• Design and implement cloud security solutions for monitoring, vulnerability remediation, and attack surface analysis and risk reduction
• Collaborate with engineering organizations to build inherently cloud architecture solutions
• Able to exercise sound judgment and thrive in ambiguous situations 

Experience:

• 7+ years of relevant cyber security experience
• Experience with modern programing languages (e.g., Python, Java, Go) and distributed systems
• Experience  with one or more major cloud service providers like Amazon Web Services (AWS), Google Cloud(GCP), Oracle Cloud, etc
• Experience with cloud service architecture, cloud security concepts, and best practices
• Experience with Kubernetes and container security
• Familiarity with securing and hardening Linux hosts
• Able to write clear, scalable and clear design documentation

Please submit your resume in English.

At Lyft, our purpose is to serve and connect. We aim to achieve this by cultivating a work environment where all team members belong and have the opportunity to thrive.

Lyft connects people to transportation to change the way we live and get around our communities. Lyft’s engineering team is growing rapidly, and we are looking for Technical Program Managers to help us scale. Come be part of a new team at Lyft focused on enabling and empowering engineering teams to deliver at scale.

Our drivers and passengers entrust Lyft with their personal information and travel details to get where they are going and expect us to keep that data safe. Lyft’s Privacy team is comprised of engineers and analysts dedicated to ensuring that appropriate data protections are applied at all times. We conduct privacy risk assessments, consult with organizational stakeholders, maintain Lyft’s privacy program, develop privacy policies, and advise on all matters related to privacy.

As a member of the Privacy team you will help ensure that privacy is built into our products by design.  Every day, you’ll meet and work with stakeholders across the company working on exciting new projects, help de-risk their product development, conduct privacy risk assessments, and serve as a trusted privacy adviser to teams across Lyft.

Responsibilities:

• Conduct privacy risk assessments of new and existing Lyft products, services, and processes
• Build strong cross-functional relationships with product and engineering teams and advise them on complex data privacy-related issues
• Analyze system designs and data flows to identify and mitigate potential privacy vulnerabilities
• Identify trends in privacy and regulatory requirements and compliance enforcement and drive necessary changes in Lyft’s data privacy program
• Communicate risk to both technical and non-technical stakeholders across the business and negotiate risk mitigation strategies
• Proactively drive development of privacy infrastructure, technical controls, and automation to make it easy for teams to achieve privacy excellence
• Develop and maintain internal privacy policies, guidelines, and best practices for Lyft

Experience:

• Deep knowledge of a broad range of privacy concepts and demonstrated ability to apply them to real-world situations
• Experience conducting privacy risk assessments, threat modeling, and risk mitigation
• Experience with technical privacy concepts (e.g., anonymization, encryption, differential privacy)
• Experience with privacy regulations (e.g., CCPA, GDPR, PIPEDA)
• Strong technical background and ability to negotiate effectively with engineering teams
• Strong cross-functional communication and leadership skills, with the ability to initiate and drive projects proactively
• Strong teamwork and collaboration skills
• Strong written and verbal communication skills
• Ability to own and manage multiple tasks and high priority projects
• Experience with Privacy Enhancing Technologies and development and/or deployment of privacy tooling a plus
• Code development, review, and maintenance experience in one or more programming languages (e.g., Python, Go, Java, C++) a plus
• IAPP privacy certifications (e.g., CIPP, CIPM, CIPT) a plus

Benefits:

• Extended health and dental coverage options, along with life insurance and disability benefits
• Mental health benefits
• Family building benefits
• Child care and pet benefits
• Access to a Lyft funded Health Care Savings Account
• RRSP plan with company match to help save for your future
• In addition to provincial observed holidays, salaried team members are covered under Lyft's flexible paid time off policy. The policy allows team members to take off as much time as they need (with manager approval). Hourly team members get 15 days paid time off, with an additional day for each year of service 
• Lyft is proud to support new parents with 18 weeks of paid time off, designed as a top-up plan to complement provincial programs. Biological, adoptive, and foster parents are all eligible.
• Subsidized commuter benefits and Lyft ride credits

Lyft is committed to creating an inclusive workforce that fosters belonging. Lyft believes that every person has a right to equal employment opportunities without discrimination because of race, ancestry, place of origin, colour, ethnic origin, citizenship, creed, sex, sexual orientation, gender identity, gender expression, age, marital status, family status, disability, pardoned record of offences, or any other basis protected by applicable law or by Company policy. Lyft also strives for a healthy and safe workplace and strictly prohibits harassment of any kind.  Accommodation for persons with disabilities will be provided upon request in accordance with applicable law during the application and hiring process. Please contact your recruiter if you wish to make such a request.

Lyft highly values having employees working in-office to foster a collaborative work environment and company culture. This role will be in-office on a hybrid schedule — Team Members will be expected to work in the office at least 3 days per week, including on Mondays, Wednesdays, and Thursdays. Lyft considers working in the office at least 3 days per week to be an essential function of this hybrid role. Your recruiter can share more information about the various in-office perks Lyft offers. Additionally, hybrid roles have the flexibility to work from anywhere for up to 4 weeks per year. #Hybrid

The expected base pay range for this position in the Toronto area is CAD $136,000 - CAD $170,000, not inclusive of potential equity offering, bonus or benefits. Salary ranges are dependent on a variety of factors, including qualifications, experience and geographic location. Your recruiter can share more information about the salary range specific to your working location and other factors during the hiring process.

Lyft may use artificial intelligence to screen applicants, however, Lyft employees make the ultimate selection and hiring decisions.

This job fills an existing vacancy.