Security Engineer (Infrastructure)

• As an Infrastructure Security Engineer, you will increase the security of Nuro’s core infrastructure used to develop and operate our autonomous delivery service
• You will need to leverage your technical skills to create cross-functional strategic outcomes for Nuro
• You will need to use good engineering judgment when evaluating and fixing both real and theoretical vulnerabilities
• You work closely with development teams and can build systems
• Your work contributes directly to the safety and security of the people in the communities we operate in
• You’re a collaborative thinker with an ownership mindset, and thrive in fast-paced and collaborative environments
• As a member of Nuro’s Security team, you will work on projects that impact all areas of security, from offensive testing to detection and response
• Assess and secure Nuro and protect user data
• Evaluate and verify engineering teams’ vulnerability remediations (PR review or other evaluations)
• Design and build security tooling and infrastructure for use Nuro’s engineers
• Design and implement core security infrastructure like authentication and authorization systems, pipelines and automation for security incident detection and response, PKI, and others

Benefits

• Free Caltrain pass and commuter benefits
• Company stock options
• Work from home opportunities
• Health insurance- Excellent communication, presentation, interpersonal, and analytical skills; the ability to communicate complex interaction concepts and risks clearly and persuasively in a highly eng-driven environment
• Software development skills, preferably in Python, Go, or C++
• Expert in one or more core domains: Securely using a public cloud, securing corporate networks and endpoints, or application security
• You have start-up DNA: You have demonstrated an ability to thrive in the ambiguity of a dynamic, start-up environment or have the DNA to do so
• Demonstrated ability to exploit vulnerabilities, e.g., winning or placing in Capture the Flags, 0-Days/CVEs, or conference talks on security research
• Reverse Engineering software using IDA Pro, Ghidra, Radare, Frida, or other tools
• Experience with:
• Software or hardware development
• Developing Systems Engineering requirements and verification statements
• Attacking embedded, real-time, safety, or flight-critical systems
• CAN, Automotive Ethernet, or other vehicle buses
• Automotive systems, especially autonomous vehicles
• Physical security assessments
• Building, evaluating, designing, and shipping hardware products
• Scaling Kubernetes and/or Google Cloud security best practices