Staff Software Engineer - Vehicle & Hardware Security (Automotive)

Location: San Francisco, CA; onsite five days per week in the office

Base salary: $224,000–$284,000 per year, with potential equity awards

Company

hirify.global commercializes autonomous vehicle technology through production-deployed Autonomous Haulage Systems for mines, quarries, and construction sites worldwide.

What you will do

• Threat model and secure automotive Ethernet, CAN, and CAN-FD networks against message injection, spoofing, replay, and other vehicle-network attacks.
• Design and review ECU security controls, including secure boot, firmware code signing, anti-rollback protections, and firmware integrity controls.
• Secure OTA update pipelines through signing, staged and canary rollouts, rollback protection, and tamper detection.
• Partner with hardware and manufacturing teams to mitigate supply-chain risks involving counterfeit or tampered vehicle components.
• Represent Security in vehicle architecture and engineering reviews, define requirements early, and own incident-response strategies for compromised vehicles, including remote isolation and quarantine.
• Provide technical leadership through security priorities, engineering standards, hiring, mentorship, planning, and team operating practices.

Requirements

• 7+ years of security engineering experience, including at least 3 years in automotive, embedded systems, or industrial IoT security.
• Hands-on experience with automotive communication protocols including CAN, CAN-FD, and UDS.
• Experience with automotive security testing tools such as SocketCAN, CANoe, Kayak, or equivalent tooling.
• Production experience securing OTA firmware or software update systems.
• Experience with secure boot, code signing, firmware integrity, and rollback protection.
• Working knowledge of ISO/SAE 21434 and its integration with software and hardware development lifecycles.
• Experience leading technical projects, teams, or security programs and influencing senior engineering stakeholders.
• Strong communication skills, including the ability to explain security risks, tradeoffs, and technical direction clearly.

Nice to have

• Experience securing Level 4 autonomous vehicle systems.
• Familiarity with UNECE WP.29, R155, and R156 cybersecurity and software-update requirements.
• Red-team, penetration-testing, or offensive-security experience focused on vehicles, embedded systems, or hardware.
• Experience with hardware security, component integrity, or automotive supply-chain security.
• Prior people-management experience or experience leading a dedicated security engineering team.

Culture & Benefits

• Work on real, production-deployed autonomous vehicle technology in demanding environments.
• Collaborate closely with experienced engineers and industry operators in a fast-moving, high-ownership environment.
• Medical, dental, vision, disability, and life insurance.
• Flexible Spending Account or Health Savings Account options, 401(k), equity, paid holidays, sick time, and unlimited flexible time off.
• Paid parental leave, pre-tax commuter benefits, and team lunch in the SoMa office on Tuesdays and Thursdays.