Automotive Product Security Risk Engineer

Zoox; Foster City (CA); On-site; USD 191,000 - 271,000; Full time

Job summary

Zoox is seeking a Product Security Threat Analysis and Security Standards specialist to lead structured security analyses of Zoox products and apply cybersecurity standards throughout the SDLC. You will translate findings into high-quality written deliverables and collaborate with cross-functional teams to align security with safety objectives in an automotive ecosystem.

The role emphasizes quantitative risk assessment, threat modeling, and adopting AI/LLM toolchains to produce regulatory-grade

Qualifications

• Master’s degree in CS or related engineering field (software, hardware, systems) and 5+ years of experience.
• A strong general systems engineering background along with a demonstrated passion and concrete expertise in cybersecurity.
• Prior experience with quantitative risk assessment frameworks (eg: EPSS, Attack trees/graph quantification, Monte Carlo simulations, Bayesian networks).
• Prior experience with the security analysis of complex embedded systems and a demonstrated skill in turning the analysis into high-quality written deliverables.
• Pragmatic adoption of AI/LLM toolchains for security analysis and authoring high quality regulatory work products.
• Bonus: ISO 21434, UNECE R155, NIST CSF, SOC2 Type2 familiarity; automotive SoCs and cloud deployment knowledge.

Responsibilities

• Perform Quantitative Risk Assessment by quantifying security related safety risks, collaborating with cross functional teams particularly safety teams to ensure alignment with safety and security objectives while supporting risk-informed engineering decisions.
• Carry out security analysis, threat modeling, and risk assessment for a complex product ecosystem consisting of a custom-designed and built vehicle fleet as well as a portfolio of cloud services.
• Define cybersecurity requirements and maintain a catalog of cybersecurity controls to establish secure baselines.
• Interface with a multitude of engineering teams within Product Security as well as across software and hardware engineering. Build and maintain a strong understanding of the underlying engineering constraints and factor that understanding into the analysis and recommendations.
• Analyze existing and emerging standards in cybersecurity (both general and domain-specific) and distill the analysis into a plan for adoption that is well-grounded and focused on tangible business impact.

Skills

Quantitative risk assessment

Threat modeling

Security analysis

Written deliverables

AI/LLM toolchains

Education

Master’s degree in CS or related engineering field

Job description

Zoox is seeking a Product Security Threat Analysis and Security Standards specialist to lead structured security analyses of Zoox products and apply cybersecurity standards throughout the SDLC. You will translate findings into high-quality written deliverables and collaborate with cross-functional teams to align security with safety objectives in an automotive ecosystem.

The role emphasizes quantitative risk assessment, threat modeling, and adopting AI/LLM toolchains to produce regulatory-grade