Staff Software Engineer

Responsibilities

• Threat model automotive Ethernet, CAN, and CAN-FD networks against vehicle-network attacks.
• Design and review ECU security controls including secure boot, firmware code signing, and anti-rollback protections.
• Secure OTA update pipelines through signing, staged and canary rollouts, rollback protection, and tamper detection.
• Partner with hardware and manufacturing teams to mitigate counterfeit, tampered, and other vehicle-component supply-chain risks.
• Represent Security in vehicle architecture and engineering design reviews.
• Own incident-response strategies for compromised vehicles, including safe remote isolation and quarantine procedures.
• Set technical priorities, engineering standards, and operating practices across the security organization.
• Provide technical direction, hiring, mentorship, and quarterly planning as the security team grows.

Requirements

• 7+ years of security engineering experience, including at least 3 years in automotive, embedded systems, or industrial IoT security.
• Hands-on experience with CAN, CAN-FD, and UDS automotive communication protocols.
• Experience with SocketCAN, CANoe, Kayak, or equivalent automotive security testing tools.
• Production experience securing OTA firmware or software update systems.
• Experience with secure boot, code signing, firmware integrity, and rollback protection.
• Working knowledge of ISO/SAE 21434 and automotive cybersecurity integration into software and hardware development lifecycles.
• Experience leading technical projects, teams, or security programs and influencing senior engineering stakeholders.
• Strong communication skills for explaining security risks, tradeoffs, and technical direction.
• Experience securing Level 4 autonomous vehicle systems is preferred.
• Familiarity with UNECE WP.29, R155, and R156 requirements is preferred.
• Red-team, penetration-testing, or offensive-security experience focused on vehicles, embedded systems, or hardware is preferred.
• Experience with hardware security, component integrity, or automotive supply-chain security is preferred.
• Prior people-management experience or experience leading a dedicated security engineering team is preferred.

Benefits

• Medical, dental, vision, disability, and life insurance.
• Flexible Spending Account and Health Savings Account options.
• 401(k), equity eligibility, sick time, unlimited flexible time off, and paid holidays.
• Paid parental leave and a pre-tax commuter benefit plan.
• Team lunch in the SoMa office every Tuesday and Thursday.
• Based in the San Francisco office and onsite five days per week for office-based teams.