Senior Security Software Engineer

The Privacy Engineering & Data Protection team aims to make Cruise a leader in self-driving consumer privacy. Cruise launched its self-driving ridehail service earlier in 2022, and we are quickly scaling; this an opportunity to influence the direction for privacy & data security at a company in its early stages of commercialization!

We are seeking candidates with software engineering chops, eager to learn about security & privacy, and excited to be on the cutting edge of self-driving technology. This Security Software Engineer will be working with Privacy Engineers, Security Engineers, and teams across the company to scale core tooling and infrastructure. The focus will be on our in-house platform for scanning, mapping, and tagging sensitive data across Cruise systems. This tooling is crucial for visibility into data lineage across Cruise, applying controls to sensitive data, and validating/enforcing these controls. You’ll also be working to make storage and processing data safe by default—empowering teams to protect user’s data.

We’re looking for someone who’s comfortable in uncharted territory as we build unique privacy technologies to maintain user trust. We need your skills and passion to make it happen. Candidates could work in the office (if SF- or Seattle-based) or remotely.

What you’ll be doing

•  Collaborating with Cruise’s Privacy Infrastructure team to mature/expand the scope for Cruise’s data discovery, mapping, and tagging tool.

• Driving new features in Cruise’s unified privacy metadata platform to automate data governance requirements like Data Subject Access Requests, deletion, and retention periods.

• Developing and maintaining features across current-generation and next-generation Privacy infrastructure.

• Collaborating with Detection & Response to mature privacy-related detections and alerts of anomalous handling of data, unexpected access, etc. 

• Participating in team’s planning, code reviews, and design discussions leading to continuous improvements in these areas.

• Creating, deploying, and analyzing our infrastructure through infrastructure-as-code tools, (e.g., Terraform).

• Investigating potential risks identified via data discovery/mapping tool, working independently to sample data, explore risks technically, engage data owners, and propose a path forward for managing the risk. 

What you must have:

•  Excited to be on the cutting edge of data security & privacy problems. Motivated to protect individuals’ privacy (does not need to have experience with privacy or security).

• Bachelor's degree in Computer Science or a similar technical field or equivalent practical experience. At least 3 years working experience as a software engineer or software developer or in a related field.

• Proficiency in Python.

• Familiarity with other languages or interest in learning (e.g., Go, C++).

• Proficiency writing SQL queries & understanding of modern data warehousing.

• Experience with the lifecycle of custom web application development, from requirements gathering to implementation, launch, and ongoing operation.

• Familiarity with full stack web application development—ideally with a modern framework like Django, Flask, or Rails.

• Experience—or at a minimum, interest in—basic front-end development.

• Code maintenance and review experience in one or more general purpose languages.

• Experience with the software development lifecycle.

• Perseverance and negotiation skills with a track record of achieving good user outcomes.

• Ability to communicate and collaborate across subject areas (e.g. engineering, legal, policy).

• Candidates must have the ability to maintain and report against a work plan, and provide updates and status reports given scope and objectives. 

The salary range for this position is $140,800 - 207,000. Compensation will vary depending on location, job-related knowledge, skills, and experience. You may also be offered a bonus, restricted stock units, and benefits. These ranges are subject to change.