About the role
As a global leader in micromobility, Lime is on a mission to build a future where transportation is shared, affordable and carbon-free. A Time Magazine 100 Most Influential Company, Lime has powered more than one billion rides in close to 30 countries across five continents, spurring a new generation of clean alternatives to car ownership. Learn more at li.me . Lime is seeking an experienced Senior Security Engineer to join our Product Security team. In this role, you'll be an embedded security partner to our engineering organization, directly contributing to the security of Lime's software, APIs, mobile applications, and connected vehicle platforms across the full product lifecycle. You will report to the Director of Security Engineering and play a key role in building and maturing our product security program across a broad set of disciplines: from secure development and vulnerability management to application security assessments, detection engineering, and threat modeling. We're a fast-paced, lean, and remote-first company, so we're looking for someone who thrives in an evolving environment, is a proactive problem-solver, and is passionate about building scalable and pragmatic security solutions for software-connected physical products. This is a unique opportunity to make a meaningful and visible impact on Lime's security posture at an exciting stage of our growth. This is a remote position with a requirement for candidates to reside in Canada to maintain effective collaboration across teams.
What You'll Do: Application Security & Secure Development: Partner with engineering teams to perform security reviews, threat modeling, and risk assessments for product features, APIs, mobile applications, and backend services. Provide actionable and risk-calibrated guidance that helps Lime ship securely without slowing down. Security Tooling & Automation: Develop and maintain scalable security tools and pipelines to automate vulnerability detection, dependency scanning, and security testing across the software development lifecycle. Contribute to and extend our security pipeline and CI/CD security gates (SAST, DAST, SCA, secrets management). Security Architecture & Design Reviews: Contribute to security architecture reviews for new product platforms and features. Evaluate authentication and authorization designs, API security posture, and data handling practices to ensure risks are identified and addressed early. Bug Bounty & External Programs: Support the operations of our BugCrowd bug bounty program, including triage, researcher communication, remediation coordination, and internal validation of reported findings. Incident Response: Serve as a product security point of contact for security incidents affecting Lime's applications and services. Contribute to investigation, root-cause analysis, corrective action, and post-incident improvement. Cross-functional Partnership & Mentorship: Work closely with Software, Platform, Mobile, and Infrastructure engineering teams to embed security into development workflows. Share knowledge, drive security-by-default practices, and mentor engineers and peers on product security fundamentals. Stay Ahead of the Threat Landscape: Continuously evaluate emerging threats, vulnerabilities, and regulatory