Security Engineer, Infrastructure

Nuro•Mountain View, CA

20h•$160,360 - $240,540

About The Position

As an Infrastructure Security Engineer, you will increase the security of Nuro’s core infrastructure used to develop and operate our autonomous delivery service. You will need to leverage your technical skills to create cross-functional strategic outcomes for Nuro. You will need to use good engineering judgment when evaluating and fixing both real and theoretical vulnerabilities. You work closely with development teams and can build systems. Your work contributes directly to the safety and security of the people in the communities we operate in. You’re a collaborative thinker with an ownership mindset, and thrive in fast-paced and collaborative environments. As a member of Nuro’s Security team, you will work on projects that impact all areas of security, from offensive testing to detection and response.

Requirements

Expert in one or more core domains: Securely using a public cloud, securing corporate networks and endpoints, or application security
Software development skills, preferably in Python, Go, or C++
You have start-up DNA: You have demonstrated an ability to thrive in the ambiguity of a dynamic, start-up environment or have the DNA to do so
Excellent communication, presentation, interpersonal, and analytical skills; the ability to communicate complex interaction concepts and risks clearly and persuasively in a highly eng-driven environment

Nice To Haves

Demonstrated ability to exploit vulnerabilities, e.g., winning or placing in Capture the Flags, 0-Days/CVEs, or conference talks on security research.
Experience with: Reverse Engineering software using IDA Pro, Ghidra, Radare, Frida, or other tools
Software or hardware development
Developing Systems Engineering requirements and verification statements
Attacking embedded, real-time, safety, or flight-critical systems
CAN, Automotive Ethernet, or other vehicle buses
Physical security assessments
Automotive systems, especially autonomous vehicles
Building, evaluating, designing, and shipping hardware products
Scaling Kubernetes and/or Google Cloud security best practices

Responsibilities

Assess and secure Nuro and protect user data.
Evaluate and verify engineering teams' vulnerability remediations (PR review or other evaluations)
Design and build security tooling and infrastructure for use Nuro’s engineers
Design and implement core security infrastructure like authentication and authorization systems, pipelines and automation for security incident detection and response, PKI, and others