Security Engineer, Infrastructure

Who We Are

Nuro is a self-driving technology company on a mission to make autonomy accessible to all. Founded in 2016, Nuro is building the world’s most scalable driver, combining cutting-edge AI with automotive-grade hardware. Nuro licenses its core technology, the Nuro Driver™, to support a wide range of applications, from robotaxis and commercial fleets to personally owned vehicles. With technology proven over years of self-driving deployments, Nuro gives the automakers and mobility platforms a clear path to AVs at commercial scale, empowering a safer, richer, and more connected future.

About the Role

As an Infrastructure Security Engineer, you will increase the security of Nuro’s core infrastructure used to develop and operate our autonomous delivery service. You will need to leverage your technical skills to create cross-functional strategic outcomes for Nuro. You will need to use good engineering judgment when evaluating and fixing both real and theoretical vulnerabilities. You work closely with development teams and can build systems. Your work contributes directly to the safety and security of the people in the communities we operate in. You’re a collaborative thinker with an ownership mindset, and thrive in fast-paced and collaborative environments. As a member of Nuro’s Security team, you will work on projects that impact all areas of security, from offensive testing to detection and response.

About the Work

• Assess and secure Nuro and protect user data.

• Evaluate and verify engineering teams' vulnerability remediations (PR review or other evaluations)

• Design and build security tooling and infrastructure for use Nuro’s engineers

• Design and implement core security infrastructure like authentication and authorization systems, pipelines and automation for security incident detection and response, PKI, and others

About You

• Expert in one or more core domains: Securely using a public cloud, securing corporate networks and endpoints, or application security

• Software development skills, preferably in Python, Go, or C++

• You have start-up DNA: You have demonstrated an ability to thrive in the ambiguity of a dynamic, start-up environment or have the DNA to do so

• Excellent communication, presentation, interpersonal, and analytical skills; the ability to communicate complex interaction concepts and risks clearly and persuasively in a highly eng-driven environment

Bonus Points

• Demonstrated ability to exploit vulnerabilities, e.g., winning or placing in Capture the Flags, 0-Days/CVEs, or conference talks on security research.

• Experience with:

• Reverse Engineering software using IDA Pro, Ghidra, Radare, Frida, or other tools

• Software or hardware development

• Developing Systems Engineering requirements and verification statements

• Attacking embedded, real-time, safety, or flight-critical systems

• CAN, Automotive Ethernet, or other vehicle buses

• Physical security assessments

• Automotive systems, especially autonomous vehicles

• Building, evaluating, designing, and shipping hardware products

• Scaling Kubernetes and/or Google Cloud security best practices

At Nuro, your base pay is one part of your total compensation package. For this position, the reasonably expected base pay range is between $160,360 and $240,540 for the level at which this job has been scoped. Your base pay will depend on several factors, including your experience, qualifications, education, location, and skills. In the event that you are considered for a different level, a higher or lower pay range would apply. This position is also eligible for an annual performance bonus, equity, and a competitive benefits package.

At Nuro, we celebrate differences and are committed to a diverse workplace that fosters inclusion and psychological safety for all employees. Nuro is proud to be an equal opportunity employer and expressly prohibits any form of workplace discrimination based on race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, veteran status, or any other legally protected characteristics.