Senior Software Engineer, Security Engineering

Responsibilities

• Design and implement onboard security controls including secure boot, code signing, secrets and key management, secure OTA updates, and autonomous driving software hardening.
• Architect and operate security across Kubernetes, AWS, on-premises data centers, CI/CD pipelines, and internal developer platforms.
• Assess and protect large language models and agentic workflows against prompt injection, data exfiltration, model risks, and supply-chain risks.
• Build IAM, secrets management, and least-privilege authorization across services, devices, and the fleet.
• Perform threat modeling, security design reviews, and risk assessments while partnering with engineering teams to remediate findings.
• Establish vulnerability management, dependency and supply-chain scanning, and a secure software development lifecycle.
• Develop detection, logging, and incident response capabilities for onboard and infrastructure environments.
• Promote security practices through tooling, automation, documentation, and mentorship.

Requirements

• Bachelor’s degree in Computer Science, Engineering, or a related field, or equivalent experience.
• At least 5 years of hands-on software engineering experience with a strong focus on security.
• Strong software development skills in one or more of Python, Go, Rust, C, C++, or JavaScript/TypeScript.
• Understanding of applied cryptography, authentication and authorization, secure system design, and common vulnerability classes.
• Experience securing cloud infrastructure and/or distributed systems in production.
• Preferred experience with embedded, automotive, IoT, or onboard/edge security, including secure boot, TPM/HSM, code signing, and OTA updates.
• Preferred familiarity with Kubernetes, AWS, Terraform, Pulumi, CI/CD pipeline hardening, IAM, HashiCorp Vault, and zero-trust architectures.
• Preferred knowledge of AI/LLM security, prompt injection, model supply chains, agent sandboxing, and AI guardrail frameworks.
• Preferred hands-on experience with SAST/DAST, SBOM and dependency scanning, SIEM, detection engineering, threat modeling, and incident response.
• Preferred familiarity with ISO/SAE 21434, NIST, OWASP, and SOC 2.