Staff Software Engineer, Privacy

As Waymo prepares to bring the Waymo Driver to European markets, we are seeking a Privacy Engineer to lead the technical architectural design and implementation of our global privacy systems.

In this role, you will bridge the gap between legal requirements (GDPR) and technical reality. You will not just "manage" compliance; you will build the actual engines, data pipelines, and anonymization frameworks that allow our autonomous vehicles to operate in strict regulatory environments. You will work closely with Legal, Product, and AI/ML teams to ensure that Privacy by Design is baked into our sensor data ingestion, mapping technologies, and rider experience from day one.

You will:

• Architect for EU Compliance: Design and build data handling systems that satisfy strict GDPR requirements, "Right to be Forgotten" automation, and consent management frameworks for European riders.
• Sensor Data Anonymization: Develop and optimize computer vision and ML pipelines to automatically detect and blur faces, license plates, and other PII from camera/Lidar data at the edge (on-vehicle) and in the cloud before it enters our training sets.
• Privacy Infrastructure: Write scalable code (C++/Java/Kotlin) to enforce retention policies, access controls, and data minimization across Waymo’s distributed infrastructure.
• Partner with Waymo’s Legal and Policy teams to translate complex regulatory texts (e.g., the EU Data & AI Act) into concrete engineering specifications and system requirements.
• Threat Modeling: Conduct privacy impact assessments (PIA) and threat modeling for new features, specifically focusing on cross-border data transfer risks and third-party vendor integration.

You have:

• BS degree in Computer Science, or a related technical field, or equivalent practical experience.
• 8+ years of experience in software engineering with a focus on privacy, security, or data infrastructure.
• Proficiency in one or more general-purpose programming languages (e.g., Python, C++, Java).
• Deep understanding of GDPR.
• Experience working with large-scale data processing frameworks (e.g., Flume, MapReduce, etc..) and cloud infrastructure.

We prefer:

• Prior experience helping a US-based tech company launch products in the European Economic Area (EEA) or UK.
• Familiarity with privacy-preserving machine learning techniques, such as Differential Privacy, Federated Learning, or Homomorphic Encryption.
• Experience building first-class user facing products.