Product Security Engineer (Automotive)

Location: Hybrid in Foster City, CA / Seattle, WA / San Diego, CA / Boston, MA

Salary: $191,000 - $271,000 per year

Company

Zoox is developing the first ground-up, fully autonomous vehicle fleet and the supporting ecosystem for urban mobility, blending robotics, machine learning, and design.

What you will do

• Perform Quantitative Risk Assessment (QRA) to quantify security-related safety risks in collaboration with safety teams.
• Carry out security analysis and threat modeling for a complex product ecosystem including custom vehicle fleets and cloud services.
• Translate conceptual findings into actionable qualitative and quantitative risk assessments.
• Interface with cross-functional software and hardware engineering teams to integrate security recommendations.
• Analyze existing and emerging cybersecurity standards to create adoption plans with tangible business impact.

Requirements

• Master’s degree in CS or a related engineering field (software, hardware, systems).
• 5+ years of experience in cybersecurity for software and cyber-physical domains.
• Proven track record in analyzing complex systems and delivering impactful insights.
• Deep understanding of cybersecurity standards evolution for cloud and cyber-physical systems.
• Must be based in or able to work from Foster City, Seattle, San Diego, or Boston.

Nice to have

• Experience with automotive SoCs, on-chip security, and onboard communications (UDS, JTAG, CAN/LIN, I2C, SPI).
• Practical application of ISO 21434, UNECE R155, NIST CSF, or SOC2 Type2.
• Familiarity with common cloud deployment architectures and frameworks.

Culture & Benefits

• Comprehensive benefits including health, long-term care, and life insurance.
• Paid time off, sick leave, and bereavement leave.
• Financial incentives through Amazon RSUs and Zoox Stock Appreciation Rights.
• Fast-moving, execution-oriented team environment at the intersection of robotics and ML.