Note: The job is a remote job and is open to candidates in USA. Lime is a global leader in micromobility on a mission to create shared, affordable, and carbon-free transportation. They are seeking a Senior Security Engineer to join their Product Security team, where the individual will contribute to the security of Lime's software, APIs, and mobile applications throughout the product lifecycle.
Responsibilities
- Partner with engineering teams to perform security reviews, threat modeling, and risk assessments for product features, APIs, mobile applications, and backend services
- Develop and maintain scalable security tools and pipelines to automate vulnerability detection, dependency scanning, and security testing across the software development lifecycle
- Contribute to security architecture reviews for new product platforms and features
- Support the operations of our BugCrowd bug bounty program, including triage, researcher communication, remediation coordination, and internal validation of reported findings
- Serve as a product security point of contact for security incidents affecting Lime's applications and services
- Work closely with Software, Platform, Mobile, and Infrastructure engineering teams to embed security into development workflows
- Continuously evaluate emerging threats, vulnerabilities, and regulatory requirements relevant to Lime's product and infrastructure stack
- Participate in the team's on-call rotation, responding to incidents, troubleshooting issues, and contributing to root cause analysis and service reliability improvements
- Respond to and troubleshoot production issues, outages, and critical alerts during assigned on-call shifts
- Document issues and contribute to improvements that reduce recurring incidents
Skills
- 5+ years of experience in a dedicated product security, application security, or security engineering role, with a strong track record of hands-on technical contribution across the software development lifecycle
- Demonstrated expertise across core product and application security domains, including experience with detection engineering, security monitoring, or building detection-as-code (DaC) pipelines for product or application security threats (SIEM, log analysis, alert tuning)
- Familiarity with IoT, connected hardware, or vehicle/firmware security in a product security context
- Experience operating or contributing to a vulnerability disclosure or bug bounty program
- Exposure to regulatory frameworks relevant to connected products, such as EU CRA, UNECE WP.29, or OWASP MASVS
- Mobile security (iOS, Android) and API security
- Secure development practices and SDLC security integration (SAST, DAST, SCA, secrets management)
- Vulnerability management tooling and processes
- Cloud security fundamentals (AWS, GCP) and container/infrastructure security
- Authentication and authorization patterns (OAuth, OIDC, RBAC)
- Strong analytical skills with the ability to triage ambiguous security signals, identify meaningful risk, and propose pragmatic mitigations that teams can act on — without over-engineering or adding unnecessary friction
- Clear written and verbal communicator who can translate complex technical security risks into actionable guidance for both engineering peers and non-technical stakeholders
- Comfortable operating in a lean, remote-first, high-trust environment. Able to independently drive work forward while collaborating across engineering, product, and security teams
- Ability to participate in a shared on-call rotation supporting production systems, including occasional after-hours, weekend, and holiday coverage, with responsibility for responding to critical alerts, coordinating escalations to restore service, and documenting issues to help prevent recurrence
- Bachelor's degree in Computer Science, Cybersecurity, or a related field preferred but not required
- Relevant certifications such as OSCP, CSSLP, GWEB, or equivalent are a plus
Benefits
- Offers Equity
- Offers Bonus
- A choice of medical, dental, and vision plans.
- We also provide company-paid life and disability insurance and company-funded mental health benefits.
- 401(k) plan with both pre-tax and Roth options, and access to a Health Savings Account (HSA) with a monthly company contribution.
- Paid parental leave for birthing and non-birthing parents, plus fertility and family-forming benefits.
- Unlimited vacation, paid leaves, and 10 company holidays.
- Complimentary use of Lime vehicles in participating cities
- A monthly phone allowance
- Dedicated learning and development days
- Access to perks including One Medical, Wellhub, and Headspace
Company Overview