Security Engineer (Infrastructure)

Join Nuro, a leading autonomous delivery service, as an Infrastructure Security Engineer. In this role, you will enhance the security of Nuro's core infrastructure, collaborate with development teams, and contribute to the safety and security of the communities we operate in. You will design and implement core security infrastructure, assess and secure Nuro, and evaluate engineering teams' vulnerability remediations. This position offers a range of benefits, including a free Caltrain pass, company stock options, work from home opportunities, and health insurance.

• Increased the security of Nuro’s core infrastructure used to develop and operate autonomous delivery services.
• Collaborated with development teams to build systems and evaluate and fix vulnerabilities.
• Designed and implemented core security infrastructure, including authentication and authorization systems.

• Excellent communication, presentation, interpersonal, and analytical skills; the ability to communicate complex interaction concepts and risks clearly and persuasively in a highly eng-driven environment
• Software development skills, preferably in Python, Go, or C++
• Expert in one or more core domains: Securely using a public cloud, securing corporate networks and endpoints, or application security
• You have start-up DNA: You have demonstrated an ability to thrive in the ambiguity of a dynamic, start-up environment or have the DNA to do so
• Demonstrated ability to exploit vulnerabilities, e.g., winning or placing in Capture the Flags, 0-Days/CVEs, or conference talks on security research
• Reverse Engineering software using IDA Pro, Ghidra, Radare, Frida, or other tools
• Experience with:
• Software or hardware development
• Developing Systems Engineering requirements and verification statements
• Attacking embedded, real-time, safety, or flight-critical systems
• CAN, Automotive Ethernet, or other vehicle buses
• Automotive systems, especially autonomous vehicles
• Physical security assessments
• Building, evaluating, designing, and shipping hardware products
• Scaling Kubernetes and/or Google Cloud security best practices