We're Cruise, a self-driving service designed for the cities we love.

We’re building the world’s most advanced self-driving vehicles to safely connect people to the places, things, and experiences they care about. We believe self-driving vehicles will help save lives, reshape cities, give back time in transit, and restore freedom of movement for many.

In our cars, you’re free to be yourself. It’s the same here at Cruise. We’re creating a culture that values the experiences and contributions of all of the unique individuals who collectively make up Cruise, so that every employee can do their best work. 

Cruise is committed to building a diverse, equitable, and inclusive environment, both in our workplace and in our products. If you are looking to play a part in making a positive impact in the world by advancing the revolutionary work of self-driving cars, come join us. Even if you might not meet every requirement, we strongly encourage you to apply. You might just be the right candidate for us.

Cruise is looking for a Senior Cybersecurity Risk Analyst to join our Security Trust & Assurance team as part of the first line of defense to help Cruise build trust with regulators, investors, internal Cruise teams, and customers. In this position, you will support Cruise’s cybersecurity risk management program and to improve Cruise’s Information Security Management System (ISMS). You will use a security first approach to prioritize and treat risk in order to keep Cruise secure. If you're interested in supporting a growing risk program and want to work with partners to implement innovative security controls, let's chat!

What you’ll be doing:

• You will conduct regular security risk assessments and create risk treatment plans to address the risks

• You will align these treatment plans with ongoing agile planning and strategic roadmaps to ensure risks are mitigated timely

• You will identify new risk, score using NIST 800-30 methodology, and prioritize the risk treatment effort

• You will work with key risk partners across Cruise to prioritize cybersecurity risk mitigation efforts

What you must have: 

• 3+ years of experience with cybersecurity risk management

• Experience with frameworks such as NIST RMF or Mitre Att&ck and can articulate the benefits of a cohesive methodology 

• Experience in a cloud environment such as AWS, GCP, or Azure and can recommend cloud security controls

• An understanding of threat modeling and threat surface reduction

• An understanding of kill chains and common attack patterns

• The ability to drive consensus across team members, often for complex problems without clear solutions

• An understanding of red team tactics, techniques, and procedures and can recommend mitigating controls

• Proactive and incessant initiative to deliver results and contribute to the team's vision

Bonus points!

• You have security engineering experience or a technical certification demonstrating an understanding of proper control implementations

• You have CRISC, CCSP, CEH, CASP+, OSCP, or similar certification

• You have experience creating practical insights based on threat intelligence

• You participate in CTF challenges, Cyber Ranges, or security conferences

• You have a bachelor’s degree in computer science, computer engineering, information systems, or business technology

The salary range for this position is $115,600 - 170,000. Compensation will vary depending on location, job-related knowledge, skills, and experience. You may also be offered a bonus, restricted stock units, and benefits. These ranges are subject to change.

Why Cruise?

• Our benefits are here to support the whole you:

• Competitive salary and benefits 
• 401(k) Cruise matching program 
• Medical / dental / vision, AD+D and Life
• One Medical membership
• Subsidized mental health benefits
• Flexible vacation and company paid holidays
• Healthy meals and snacks provided for non-remote employees
• Paid parental, jury duty, bereavement, family care, and medical leave
• Fertility Benefits
• Dependent Care Flexible Spending Account, subsidized by Cruise
• Flexible Spending Account 
• Monthly wellness stipend
• Pre-tax Commuter Benefit Plan for non-remote employees
• CruiseFlex, a working policy for US-Based Cruisers, lets you and your manager find the working style that’s best for you, whether it’s primarily in-person, primarily at home, or a combination of home and in-office time. -

  Apply for this role

  Generate a tailored application kit with a matched cover letter, interview prep, and CV highlights — in under 60 seconds.

  Apply Now →Generate Application Kit

  Free account required — sign up in 30s

  Report an issue

  Company

  Cruise LLC

  View company profile →