Senior Security Engineer, Lime
$160-220k
May also include discretionary annual performance bonus opportunities and equity, subject to applicable plan terms and eligibility requirements.
Electric bike and scooter rentals
Be an early applicant
Electric bike and scooter rentals
1001+ employees
Be an early applicant
$160-220k
May also include discretionary annual performance bonus opportunities and equity, subject to applicable plan terms and eligibility requirements.
1001+ employees
Company mission
To build a future where transportation is shared, affordable and carbon-free.
Role
Who you are
- We're a fast-paced, lean, and remote-first company, so we're looking for someone who thrives in an evolving environment, is a proactive problem-solver, and is passionate about building scalable and pragmatic security solutions for software-connected physical products
- Experience: 5+ years of experience in a dedicated product security, application security, or security engineering role, with a strong track record of hands-on technical contribution across the software development lifecycle
- Technical Depth: Demonstrated expertise across core product and application security domains, including:
- Experience with detection engineering, security monitoring, or building detection-as-code (DaC) pipelines for product or application security threats (SIEM, log analysis, alert tuning)
- Familiarity with IoT, connected hardware, or vehicle/firmware security in a product security context
- Experience operating or contributing to a vulnerability disclosure or bug bounty program
- Exposure to regulatory frameworks relevant to connected products, such as EU CRA, UNECE WP.29, or OWASP MASVS
- Mobile security (iOS, Android) and API security
- Secure development practices and SDLC security integration (SAST, DAST, SCA, secrets management)
- Vulnerability management tooling and processes
- Cloud security fundamentals (AWS, GCP) and container/infrastructure security
- Authentication and authorization patterns (OAuth, OIDC, RBAC)
- Problem-Solver: Strong analytical skills with the ability to triage ambiguous security signals, identify meaningful risk, and propose pragmatic mitigations that teams can act on — without over-engineering or adding unnecessary friction
- Communication: Clear written and verbal communicator who can translate complex technical security risks into actionable guidance for both engineering peers and non-technical stakeholders
- Team Player: Comfortable operating in a lean, remote-first, high-trust environment. Able to independently drive work forward while collaborating across engineering, product, and security teams
- Education & Certifications: Bachelor's degree in Computer Science, Cybersecurity, or a related field preferred but not required. Relevant certifications such as OSCP, CSSLP, GWEB, or equivalent are a plus
- Ability to participate in a shared on-call rotation supporting production systems, including occasional after-hours, weekend, and holiday coverage, with responsibility for responding to critical alerts, coordinating escalations to restore service, and documenting issues to help prevent recurrence
- Not sure if you meet all the qualifications? If this role excites you we encourage you to apply
What the job involves
- Lime is seeking an experienced Senior Security Engineer to join our Product Security team. In this role, you'll be an embedded security partner to our engineering organization, directly contributing to the security of Lime's software, APIs, mobile applications, and connected vehicle platforms across the full product lifecycle
- You will report to the Director of Security Engineering and play a key role in building and maturing our product security program across a broad set of disciplines: from secure development and vulnerability management to application security assessments, detection engineering, and threat modeling
- This is a unique opportunity to make a meaningful and visible impact on Lime's security posture at an exciting stage of our growth
- Application Security & Secure Development: Partner with engineering teams to perform security reviews, threat modeling, and risk assessments for product features, APIs, mobile applications, and backend services. Provide actionable and risk-calibrated guidance that helps Lime ship securely without slowing down
- Security Tooling & Automation: Develop and maintain scalable security tools and pipelines to automate vulnerability detection, dependency scanning, and security testing across the software development lifecycle. Contribute to and extend our security pipeline and CI/CD security gates (SAST, DAST, SCA, secrets management)
- Security Architecture & Design Reviews: Contribute to security architecture reviews for new product platforms and features. Evaluate authentication and authorization designs, API security posture, and data handling practices to ensure risks are identified and addressed early
- Bug Bounty & External Programs: Support the operations of our BugCrowd bug bounty program, including triage, researcher communication, remediation coordination, and internal validation of reported findings
- Incident Response: Serve as a product security point of contact for security incidents affecting Lime's applications and services. Contribute to investigation, root-cause analysis, corrective action, and post-incident improvement
- Cross-functional Partnership & Mentorship: Work closely with Software, Platform, Mobile, and Infrastructure engineering teams to embed security into development workflows. Share knowledge, drive security-by-default practices, and mentor engineers and peers on product security fundamentals
- Stay Ahead of the Threat Landscape: Continuously evaluate emerging threats, vulnerabilities, and regulatory requirements (including EU CRA) relevant to Lime's product and infrastructure stack. Bring proactive recommendations to the team
- Participate in the team's on-call rotation, responding to incidents, troubleshooting issues, and contributing to root cause analysis and service reliability improvements
- Respond to and troubleshoot production issues, outages, and critical alerts during assigned on-call shifts
- Escalate incidents as needed and collaborate with team members to restore service
- Document issues and contribute to improvements that reduce recurring incidents
- Be available to provide occasional after-hours, weekend, and holiday support while on call
Our take
In recent years, electric-powered mobility companies have attracted an extraordinary amount of interest and funding, in part due to rising eco-friendly sentiment, and in part because of the race to "find the next Uber". Lime is one such company, that has rapidly scaled across multiple geographies to be a key player in the fight for market leadership.
Lime, along with its competitors, has had to grapple with regulation in many of its target markets, but nonetheless has steadily increased its footprint. Since its launch, the company has facilitated millions of trips, making it one of the biggest companies of its kind. Interestingly, the CEO has stated that "cars are our true business rivals—not other scooter companies", suggesting that its biggest business challenge will be to get families to give up their second cars.
With a presence that spans an impressive number of regions - in 2023, Lime began operating in Qatar - the company has cemented itself in the micromobility market and stands to profit from the increasing popularity of these types of services. A substantial increase in ridership enabled Lime to achieve "free cash flow positivity" two years in a row, with suggestions it will pursue a US IPO in 2027.
Freddie
Company Specialist at Welcome to the Jungle
Insights
17% employee growth in 12 months
Company
Funding (last 2 of 7 rounds)
Nov 2021
$523m
CONVERTIBLE
May 2020
$170m
SERIES E
Total funding: $1.5bn
Company benefits
- Disability insurance
- 401(k)
Company HQ
The East Cut, San Francisco, CA
Leadership
Toby
(Co-Founder & Board Advisor)Founder and CEO of ZERO&. Was a Marketing Manager at Pepsi for 6 years before doing an MBA at Berkeley. Moved into consulting and VC for 5 years before starting Lime.
Brad
(Co-Founder & Chairman)VP of Business Development at Tencent for 8 years. Managing Partner of a VC firm for 3 years, where he worked with Toby. Has an MBA from Berkeley.
Share this job
View 22 more jobs at Lime