Product Security Threat & Risk Engineer

Socket.dev; Foster City (CA); On-site; USD 180,000 - 240,000; Full time

Job summary

Zoox is seeking a Product Security Threat Analysis and Security Standards engineer to lead structured security analyses across the system development life cycle. You will translate findings into high-quality deliverables and assess threats in automotive hardware and cloud services.

The role requires a strong systems engineering background, 5+ years, mastery of risk assessment methods, and experience with standards like ISO 21434.

Qualifications

• Master’s degree in CS or related engineering and 5+ years of experience.
• Strong systems engineering background with cybersecurity expertise.
• Experience with quantitative risk assessment frameworks (EPSS, Attack trees/graphs, Monte Carlo, Bayesian networks).
• Experience with security analysis of complex embedded systems and turning analysis into written deliverables.
• Pragmatic adoption of AI/LLM toolchains for security analysis and regulatory deliverables.

Responsibilities

• Perform quantitative risk assessment by quantifying security-related safety risks with cross-functional safety teams.
• Carry out security analysis, threat modeling, and risk assessment for a complex product ecosystem (vehicles and cloud services).
• Define cybersecurity requirements and maintain a catalog of cybersecurity controls to establish secure baselines.
• Interface with numerous engineering teams and translate constraints into actionable analysis and recommendations.
• Analyze existing and emerging standards and distill plans for adoption with tangible business impact.

Skills

Cybersecurity

Systems engineering

Threat modeling

Quantitative risk assessment

AI/LLM tooling

Education

Master’s degree in CS or related engineering

Tools

EPSS

Attack trees

Monte Carlo simulations

Bayesian networks

ISO 21434

UNECE R155

NIST CSF

Job description

Zoox is seeking a Product Security Threat Analysis and Security Standards engineer to lead structured security analyses across the system development life cycle. You will translate findings into high-quality deliverables and assess threats in automotive hardware and cloud services.

The role requires a strong systems engineering background, 5+ years, mastery of risk assessment methods, and experience with standards like ISO 21434.