Product Security Engineer

Responsibilities

• Own threat modeling and security design reviews across gateway SoCs, boot chains, embedded firmware, fleet transport, command authority, and cloud services.
• Translate threat models into prioritized security objectives and drive their implementation.
• Design and build device identity, factory provisioning, code and OTA signing, service authentication, and certificate lifecycle foundations.
• Analyze vulnerability reports and internal findings by reproducing issues, conducting variant analysis, assessing exploitability and impact, and directing fixes.
• Test the product from an attacker’s perspective and convert findings into requirements and standards changes.
• Author security engineering standards and reference patterns and build tooling for repeatable review and enforcement.
• Produce technical security assessments for utility, interconnection, and certification engagements.
• Collaborate across teams and support conclusions with clear technical evidence.

Requirements

• Experience securing production systems spanning multiple trust boundaries.
• Track record of shipping security work end to end and collaborating across teams to implement it.
• Ability to distinguish plausible attacks from consequential attacks and prioritize accordingly.
• Ability to become productive quickly in unfamiliar systems, validate assumptions, and support conclusions with evidence.
• Sufficient software engineering depth to read, test, and change systems regardless of language or technology stack.
• Clear communication and writing skills with the ability to rally other teams.

Benefits

• Work in person at Base.
• Work in a fast-paced startup environment where priorities and responsibilities may evolve.
• Join a small, generalist Product Security team protecting a live fleet deployed in thousands of homes.
• Contribute to rebuilding the electrical grid through distributed battery infrastructure.