At Lyft, our mission is to improve people's lives with the world's best transportation. To do this, we start with our own community by creating an open, inclusive, and diverse organization. 

We care deeply about delivering the best transportation experience; this means the best experience for the passenger and the best experience for the driver. We believe this quality of service can only be achieved with a deep understanding of our world, our cities, our streets… how they evolve, how they breathe. We embrace the powerful positive impact transportation will bring to our everyday lives and with our ambition, we will become a leader in the development and operation of such vehicles. Thanks to our network, with hundreds of millions of rides every year, we have the means to make autonomy a safe reality. 

Our drivers and passengers entrust Lyft with their personal information and travel details to get where they're going and expect us to keep that data safe. Lyft's security team leads efforts across the company to ensure our systems are secure and worthy of our users' trust.

The security team designs and builds Lyft's security architecture, consults with other teams as they build and launch new products and features, proactively plans for the unexpected, and responds to incidents that occur. Our work affects the entire company and takes place at all levels of the stack, from infrastructure to web application security, as well as mobile apps, IT, and vehicles. We try to approach security from a software engineering standpoint. We believe in scaling security through automation and tooling and we ship frequently. Check out our blog posts at https://eng.lyft.com/tagged/security to learn more about some of the things we’ve built.

We’re looking for an intern to join our team and work side-by-side with top engineers in the industry while having autonomy from the get-go. In order to be scalable, each secure product quality gate must be automated and integrated into our software release pipeline. Our grand vision is a fully automated series of quality controls that constantly validate that our code is secure. In short, we’re building a robot army that constantly validates our current security status. Don’t you want to live in this beautiful world?

Responsibilities:

• Own your project, while checking in with other team members throughout the day with questions and updates
• Collaborate with teams across Lyft to ensure security best practices are leveraged as we roll out new features and expand our service offerings.
• Conduct penetration testing, code review and breach readiness across our online and mobile infrastructure
• Proactively research new attack vectors that may affect Lyft

Experience:

• Currently pursuing a B.S. or M.S. in Computer Science or a related field, with at least one additional term of school to complete after the end of this internship
• Available during Summer 2022 for an internship in NYC, SFO, SEA
• Hacker Mindset
• Excellent communication skills
• Passion for community, sustainability, transportation and/or security
• Ability to thrive in a startup environment
• Participated in bug bounty programs
• Programming in Python or Go
• Threat modeling, code review, penetration testing against cloud environments and/or mobile (IOS/Android)
• Present findings, recommendations and results to team
• Ability to communicate complex information, concepts, or ideas in a confident and well-organized manner through verbal, written, and/or visual means
• Ability to manage multiple tasks and priorities
• Ability to work independently with minimal supervision

Benefits:

• Great medical, dental, and vision insurance options
• Mental health benefits
• In addition to holidays, interns receive 1 day paid time off and 3 days sick time off
• 401(k) plan to help save for your future
• Pre-tax commuter benefits
• Lyft Pink - Lyft team members get an exclusive opportunity to test new benefits of our Ridership Program

Lyft is an equal opportunity/affirmative action employer committed to an inclusive and diverse workplace. All qualified applicants will receive consideration for employment  without regards to race, color, religion, sex, sexual orientation, gender identity, national origin, disability status, protected veteran status or any other basis prohibited by law. We also consider qualified applicants with criminal histories consistent with applicable federal, state and local law.

Until further notice, Lyft employees working in the United States in any capacity (on a daily or hybrid schedule or as a visitor) are required to provide proof of full vaccination against COVID-19. Employees are considered fully vaccinated two weeks after completion of the entire recommended series of vaccination (usually one or two doses) with a vaccine authorized to prevent COVID-19 by the federal Food and Drug Administration (FDA), including by way of an emergency use authorization. Lyft will maintain records associated with your vaccination history in a way that is compliant with all relevant Federal, state and local laws. Exceptions to this requirement are employees who require religious or medical exemption as approved through Lyft’s accommodations process.