Product Security Engineer – QRA

Jobtailor; California (MO); On-site; USD 140,000 - 210,000; Full time

Job summary

Zoox is seeking a senior cybersecurity risk analyst to lead quantitative risk assessment and threat modeling for its autonomous vehicle fleet and cloud-services ecosystem. The role requires translating complex findings into actionable risk assessments and collaborating with product security, software, and hardware teams to align safety and security goals.

You will analyze evolving cybersecurity standards, develop adoption plans, and apply ISO 21434 and related frameworks to drive secure

Qualifications

• Master’s degree in Computer Science or a related engineering field.
• 5+ years of experience.
• Strong understanding of cybersecurity, including specific vulnerabilities and attacks in software and cyber-physical domains.
• Demonstrated experience analyzing complex systems for cybersecurity and delivering actionable insights.
• Understanding of current and evolving cybersecurity standards for cloud and cyber-physical systems.
• Direct demonstrated experience applying ISO 21434, UNECE R155, NIST CSF, SOC2 Type 2, or similar frameworks and standards is advantageous.
• Prior security analysis experience with automotive SoCs, on-chip security features, onboard communications, and interfaces such as UDS, JTAG, CAN/LIN, I2C, and SPI is a bonus.
• Familiarity with common cloud deployment architecture and frameworks is a bonus.

Responsibilities

• Perform Quantitative Risk Assessment by quantifying security-related safety risks and collaborating with cross-functional teams, particularly safety teams, to align safety and security objectives and support risk-informed engineering decisions.
• Conduct security analysis, threat modeling, and risk assessment for Zoox’s custom-designed autonomous vehicle fleet and cloud-services ecosystem
• Translate conceptual findings into qualitative and quantitative risk assessments
• Interface with Product Security, software engineering, and hardware engineering teams; understand engineering constraints and incorporate them into analyses and recommendations
• Analyze current and emerging cybersecurity standards and create adoption plans focused on tangible business impact

Skills

Quantitative Risk Assessment

Cybersecurity Analysis

Threat Modeling

ISO 21434 Application

Cloud Deployment Architecture

Education

Master’s Degree in Computer Science

Tools

UDS

JTAG

CAN/LIN

I2C

SPI

Cloud Services Ecosystem

Job description

• Perform Quantitative Risk Assessment by quantifying security-related safety risks and collaborating with cross-functional teams, particularly safety teams, to align safety and security objectives and support risk-informed engineering decisions
• Conduct security analysis, threat modeling, and risk assessment for Zoox’s custom-designed autonomous vehicle fleet and cloud-services ecosystem
• Translate conceptual findings into qualitative and quantitative risk assessments
• Interface with Product Security, software engineering, and hardware engineering teams; understand engineering constraints and incorporate them into analyses and recommendations
• Analyze current and emerging cybersecurity standards and create adoption plans focused on tangible business impact

Requirements

• Master’s degree in Computer Science or a related engineering field, such as software, hardware, or systems engineering
• 5+ years of experience
• Strong understanding of cybersecurity, including specific vulnerabilities and attacks in software and cyber-physical domains
• Demonstrated experience analyzing complex systems for cybersecurity and delivering impactful, actionable insights
• Understanding of current and evolving cybersecurity standards for cloud and cyber-physical systems
• Direct demonstrated experience applying ISO 21434, UNECE R155, NIST CSF, SOC2 Type 2, or similar frameworks and standards is advantageous
• Prior security analysis experience with automotive SoCs, on-chip security features, onboard communications, and interfaces such as UDS, JTAG, CAN/LIN, I2C, and SPI is a bonus
• Familiarity with common cloud deployment architecture and frameworks is a bonus

Core Competencies

Expertise in Quantitative Risk Assessment and Cybersecurity, with a strong focus on analyzing complex systems and aligning safety and security objectives. Proficient in applying industry standards and frameworks to enhance security measures in autonomous vehicle systems and cloud services.

Highest-signal resume keywords

• Quantitative Risk Assessment
• Cybersecurity Analysis
• Threat Modeling
• ISO 21434 Application
• Cloud Deployment Architecture

Hard Skills

• Cybersecurity
• Risk Assessment
• Threat Modeling
• Security Analysis
• Complex Systems Analysis
• Cyber-Physical Systems
• Automotive SoCs
• On-Chip Security Features
• Vulnerability Analysis
• Actionable Insights

Soft Skills

• Collaboration
• Communication
• Cross-Functional Teamwork

Certifications & Qualifications

• Master’s Degree in Computer Science
• NIST CSF
• SOC2 Type 2

Industry Keywords

• Cybersecurity Standards
• ISO 21434
• UNECE R155
• Automotive Security
• Cloud Security

Tools & Technologies

• UDS
• JTAG
• CAN/LIN
• I2C
• SPI
• Cloud Services Ecosystem