About the company
Lyft's security team leads efforts across the company to ensure systems are secure and worthy of users' trust. Corporate Security sits where security meets IT, spanning detection engineering, platform operations, and automation.
Responsibilities
- Collaborate with teams across Lyft to ensure security best practices as new features roll out
- Own the security posture of Lyft's SSO/MFA platform: authentication policies, device trust and posture checks, MFA factor strategy, phishing-resistant authentication rollout
- Proactively research new attack vectors affecting Lyft
- Develop detections for identity-based attacks: MFA fatigue, session token theft, phishing-driven account takeover, abuse of privileged admin roles
- Deploy, tune, and operate Lyft's EDR platform across macOS and Windows fleets
- Own the operational health of the agent fleet: coverage gaps, version and policy drift, check-in failures, remediation workflows with IT
- Operate and tune DLP tooling to detect and prevent unsanctioned movement of company data
- Write code to integrate corporate security tooling, push telemetry into the data platform, enrich alerts, and automate response
- Define and report metrics on control coverage, detection efficacy, and mean time to remediate
- Contribute to on-call rotation and incident response, including postmortems
- Produce runbooks and documentation
Requirements
- Hands-on experience operating enterprise identity platforms (Okta, Entra ID, Duo): authentication policy, device trust, MFA factor strategy, lifecycle automation via SCIM or API
- Experience deploying and tuning EDR at fleet scale (SentinelOne, CrowdStrike, Defender) across mixed macOS and Windows
- Ability to write detection logic and investigate endpoint telemetry: process trees, file and network activity, authentication events
- Development skills in Python, Go, or similar for automation
- Working knowledge of macOS and Windows internals: process execution, persistence mechanisms, code signing, native security controls
- Ability to present findings and recommendations to leadership
- Ability to manage multiple tasks and priorities, work independently with minimal supervision
- Resume must be submitted in English