Security Architect

We are an in‑office company, and our expectation is that employees primarily work from their Applied Intuition office 5 days a week. However, we also recognize the importance of flexibility and trust our employees to manage their schedules responsibly. This may include occasional remote work, starting the day with morning meetings from home before heading to the office, or leaving earlier when needed to accommodate family commitments. About the role As a Security Architect at Applied Intuition, you will lead the design and implementation of cybersecurity architectures for next‑generation automotive systems, ensuring compliance with ISO/SAE 21434 cybersecurity engineering standards and UN Regulations 155/156 requirements. Working alongside embedded and application security engineers, you will establish security controls spanning silicon hardware, embedded systems, POSIX system, networks, and cloud infrastructure for automotive platforms. This role requires deep technical expertise in automotive cybersecurity frameworks, hands‑on experience with secure development lifecycle (SDL) processes, and the ability to translate regulatory requirements into implementable security architectures. At Applied Intuition, you will: Develop cybersecurity architectures compliant with ISO/SAE 21434 engineering requirements and UN R155 Cybersecurity Management System (CSMS) mandates across all vehicle lifecycle phases (concept, development, production, operation, decommissioning) Implement UN R156‑compliant Software Update Management Systems (SUMS) with secure OTA update mechanisms, cryptographic verification, and version control for automotive ECUs Conduct threat analysis and risk assessments (TARA) per ISO 21434 AnnexC requirements, addressing 69 attack vectors identified in UN R155 Annex5 Design hardware‑rooted security controls for automotive SoCs including secure boot, hardware security modules (HSM), and TEE implementations Collaborate with suppliers to ensure Tier1/Tier2 component security meets ISO21434 supply chain requirements and UN R155 post‑production obligations Develop automotive‑specific security requirements for AI/ML systems in autonomous driving platforms, addressing model integrity and adversarial attack prevention We're looking for someone who has: 7+ years of hands‑on experience designing and deploying security solutions for embedded automotive systems, with proven expertise in: Automotive communication protocol security (CAN bus hardening, Ethernet intrusion detection) Cryptographic engineering for resource‑constrained environments (ECC optimization, post‑quantum crypto prototyping) Proficiency in automotive security toolchains: Embedded debug tools (JTAG, UART, Trace32) Vehicle network analysis (Vector CANoe, Wireshark dissectors for SOME/IP) ECU flashing and diagnostic tools (ODX/PDX scripting, UDS exploit development) Strong systems programming skills in C/C++/Rust for bare‑metal and RTOS environments, with experience in: Secure over‑the‑air update implementations Real‑time intrusion detection systems for vehicle networks Demonstrated ability to lead technical security initiatives, including: Threat modeling for complex automotive architectures Security code reviews for safety‑critical embedded software Mentoring junior engineers in secure coding practices Familiarity with automotive development workflows: AUTOSAR Classic/Adaptive security components Nice to have: Contributions to open‑source automotive security projects (e.g., OpenXC, SavvyCAN) Experience with autonomous vehicle sensor security (LiDAR/Camera spoofing countermeasures) Background in hardware security evaluation (glitching, fault injection, TEMPEST) Development of vehicle‑specific penetration testing rigs (CAN bus injectors, ECU emulators) Public research on automotive vulnerabilities (CVEs, conference presentations, whitepapers) Secure boot implementation and hardware‑rooted trust chains (HSM provisioning, TEE architectures) Reverse engineering and vulnerability research on automotive firmware (ARM Cortex‑M/R, QNX, AUTOSAR) Experience with hardware security module integration Familiarity with CI/CD pipelines for ECU software with SBOM generation Familiarity with Hardware‑in‑the‑loop (HIL) security testing Compensation at Applied Intuition for eligible roles includes base salary, equity, and benefits. Base salary is a single component of the total compensation package, which may also include equity in the form of options and/or restricted stock units, comprehensive health, dental, vision, life and disability insurance coverage, 401(k) retirement benefits with employer match, learning and wellness stipends, and paid time off. Note that benefits are subject to change and may vary based on jurisdiction of employment. Applied Intuition pay ranges reflect the minimum and maximum intended target base salary for new hire salaries for the position. The actual base salary offered to a successful candidate will additionally be influenced by a variety of factors including experience, credentials & certifications, educational attainment, skill level requirements, interview performance, and the level and scope of the position. Base salary range for this full‑time position in the location listed is: $197,400 - $292,393 USD annually. Don’t meet every single requirement? If you’re excited about this role but your past experience doesn’t align perfectly with every qualification in the job description, we encourage you to apply anyway. You may be just the right candidate for this or other roles. Applied Intuition is an equal opportunity employer and federal contractor or subcontractor. Consequently, the parties agree that, as applicable, they will abide by the requirements of 41 CFR 60‑1.4(a), 41 CFR 60‑300.5(a) and 41 CFR 60‑741.5(a) and that these laws are incorporated herein by reference. These regulations prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities, and prohibit discrimination against all individuals based on their race, color, religion, sex, sexual orientation, gender identity or national origin. These regulations require that covered prime contractors and subcontractors take affirmative action to employ and advance in employment individuals without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status or disability. The parties also agree that, as applicable, they will abide by the requirements of Executive Order 13496 (29 CFR Part 471, AppendixA to SubpartA), relating to the notice of employee rights under federal labor laws. #J-18808-Ljbffr Decisive Point