Sr. Product Security Engineer (Automotive)

Location: Minneapolis, Minnesota; onsite Monday through Thursday, with Fridays flexible. Multi-region travel of up to 5% may be required.

Annual base salary: $105,228.33–$168,700.00

Company

hirify.global develops sustainable and efficient climate solutions for buildings, homes, transportation, and mobile HVAC applications through brands including Trane and Thermo King.

What you will do

• Develop and implement secure embedded software for transport refrigeration and mobile HVAC controls platforms.
• Lead threat modeling, security DFMEA, penetration testing reviews, attack modeling, TARA, and secure development lifecycle activities.
• Assess product security risks, define mitigation strategies, and maintain vulnerability backlogs through closure.
• Support vehicle cybersecurity and software-update type approval, including CSMS and SUMS evidence and processes.
• Define and validate secure OTA and service-tool updates, secure boot, hardware roots of trust, PKI, code signing, and anti-rollback protections.
• Guide cross-functional Systems, Hardware, and Software teams while validating security, regulatory, quality, and privacy requirements.

Requirements

• Bachelor’s or master’s degree in computer engineering, computer science, electrical engineering, or a related technical field, plus 5+ years of experience.
• Experience with embedded software development and programming languages such as C, C++, C#, Rust, or Python.
• Expertise securing embedded controls platforms, including Embedded Linux, Yocto, and RTOS environments such as FreeRTOS or Zephyr.
• Experience with automotive or vehicle cybersecurity, ISO/SAE 21434, UNECE R155/R156, and secure over-the-air software updates is strongly preferred.
• Knowledge of secure boot, hardware roots of trust, secure elements, PKI, code signing, key management, and embedded connectivity protocols.
• Familiarity with SAST, software composition analysis, DevOps pipelines, automated testing, and cybersecurity standards including ISO 24089, IEC 62443, and NIST.

Nice to have

• Experience as an embedded product security engineer.
• Experience securing CAN J1939/CAN FD, Automotive Ethernet, MQTT, SecOC, MACsec, or mutual TLS.
• Experience with GB 44495-2024 type-approval expectations and privacy regulations such as GDPR, CCPA, LGPD, the EU Data Act, or California SB-327.

Culture & Benefits

• Health insurance and wellness programs begin on day one for employees and families.
• Family-building benefits include fertility coverage and adoption or surrogacy assistance.
• Paid time off includes vacation days, holidays, sick leave, volunteer leave, and parental leave options.
• 401(k) matching, education and training programs, tuition assistance, and student debt support are available.
• Benefits may vary by site, collective bargaining agreement, and local or state regulations.