Cyber Security Engineer, Data Protection, Infrastructure and Identity Management

Latitude AI (lat.ai) is an automated driving technology company developing a hands-free, eyes-off driver assist system for next-generation Ford vehicles at scale. We’re driven by the opportunity to reimagine what it’s like to drive and make travel safer, less stressful, and more enjoyable for everyone.  

When you join the Latitude team, you’ll work alongside leading experts across machine learning and robotics, cloud platforms, mapping, sensors and compute systems, test operations, systems and safety engineering – all dedicated to making a real, positive impact on the driving experience for millions of people. 

As a Ford Motor Company subsidiary, we operate independently to develop automated driving technology at the speed of a technology startup. Latitude is headquartered in Pittsburgh with engineering centers in Dearborn, Mich., and Palo Alto, Calif.

Meet the team:

The Enterprise Cyber Security team is focused on ensuring the resilience of our corporate environment with focus on protection of our corporate systems, IP, and employee data. We are a close-knit team with strong cross-functional roles in the company.

As a Cyber Security Engineer, you will be the hands-on technical lead securing our Infrastructure and assets (Servers, Client Endpoints, VMs, etc…) with a focus on Data Protection/Loss Prevention (DLP/CASB/MDM/Mail Flow, etc…), and our Identity Management Solutions (AD/LDAP/IDP/MFA). You will be backing up others on the team including Incident Response and Vulnerability Management. You should have a deep understanding of infrastructure and solutions that support management of assets and the operations depending on it, including our software/hardware/network engineering, fleet operations requirements, and administrative functions. You will use your knowledge and experience to design, implement, measure, and continuously improve our security posture and tooling. 

What you’ll do: 

• Plan for, execute, and follow through on projects and engagements independently or with little guidance
• Apply best practices in software engineering, delivering projects on time, on budget, and with excellent quality and security configurations
• Review the existing and new deployments and architecture designs looking for design flaws, security improvements, and advocating for stronger security controls that meet functional and operational needs
• Work hand-in-hand with the IT and Product teams to review, research, design and develop security solutions that enable productivity, but maintain security
• Engage actively in software selection and deployment initiatives to assess and onboard security and other technical solutions for endpoints, development and production environments. Documenting findings, conduct comparisons, and Proof of Concepts aiding the team in making informed decisions
• Review and design the automation and orchestration aspects of security processes and tooling to integrating with APIs and applications/workflows across the organization
• Identify, Develop, and deliver dashboards and report metrics on the status of the Cyber Security posture, and develop dashboards, reports, and define metrics for cross-functional teams
• Moderate and contribute to deployments and administrative controls that contribute to:
• Proactive monitoring, analysis, and correcting system security issues
• Development of scripts to automate, perform security checks, and develop tools to enhance support of the infrastructure and endpoint systems
• Implement and deploy solutions to protect infrastructure and Intellectual Property
• Developing playbooks/runbooks, operational and troubleshooting documentation for use internally and with external MDR providers
• Manage solutions for protection of Mail Flows/attachments, EDR, DLP, CASB, and system compliance
• Provide ongoing support for various Incident, Vulnerability, and Security event workflows

What you'll need to succeed:

• Bachelor's degree in Computer Engineering, Computer Science, Electrical Engineering, Robotics or a related field and 2+ years of relevant experience, Master's degree, or PhD
• 2+ years of related experience Incident Response management and assessing the risk/severity rating of incidents and exposures
• Hands-on experience with tooling in the EDR, DLP, CASB, and Logging/Alerting tools and Compliance/Response space
• Experience with MacOS, Linux, and Windows Systems Administration using configuration management software and tooling to manage systems across a large and distributed environments
• Strong understanding of Cyber Security Standards (ISO27001, NIST 800-53, CIS Benchmarks)
• Ability and experience with automation of Security Standard