Staff Security Engineer, Cruise

• You have experience working with or operating secrets management systems, (e.g., Vault, KMS)
• You have experience designing and/or operating a production-level public-key infrastructure
• You have a solid understanding of public-key cryptography and cryptographic protocols/primitives
• You've operated and have an in-depth understanding of cloud infrastructure platforms, (AWS, GCP, Azure)
• You have experience using infrastructure-as-code tools, (e.g., Terraform)
• You have experience working with modern development and deployment workflows (containerization, container orchestration, CI/CD etc.)
• You possess strong security fundamentals and have solid threat modeling and security architecture skills
• Experience writing performant, maintainable, testable code in at least one of the following: Go, Rust, Python, or Node.js
• BS, MS or PhD in CS, Math, Physics, or equivalent real-world experience
• Passion for self-driving technology and its potential impact on the world
• Attention to detail and a passion for correctness
• You must be a self-starter who thrives in a fast-paced, agile environment – which means wearing many hats, being able to change direction quickly, and showing an eagerness to learn and introduce new technologies as the need arises

Desirable

• You will leverage deep understanding of user needs to help define, design and build products that are in line with Cruise’s mission and strategy
• You will play a key role in designing, building and implementing technological solutions that enable Cruise engineers to contribute to Cruise's overall security posture and solve complex security problems
• Building and operating foundational services that improve PKI and secrets management of our platform
• Leading architecture and major design decisions that will affect access to secrets and internal webs of trust
• Maintaining and building interdisciplinary skills through research, experimentation, and exploration
• Consulting with leadership on foundational security architecture decisions that will affect Cruise for years to come
• Developing processes, policies, systems, software, and controls to maintain and operate Cruise's internal PKI and Secrets management systems
• Working with engineers and management across organizational boundaries to provide a robust and observable public-key infrastructure
• Mentoring other team members