Security Architect

Applied Intuition; Sunnyvale (CA); Hybrid; USD 130,000 - 170,000; Full time

Benefits offered by this job

Comprehensive health insurance

401(k) with employer match

Equity options

Job summary

Applied Intuition in Sunnyvale, CA, seeks a Security Architect to lead cybersecurity architecture design for next-generation automotive systems. Candidates should have over 7 years of hands-on experience focused on compliance with ISO/SAE standards and UN regulations.

The position offers the opportunity to implement comprehensive security solutions, work with cross-functional teams, and contribute to advanced automotive technologies. Flexibility in work hours, including occasional remote work, is also provided.

Qualifications

• Proficiency in automotive security toolchains.
• Demonstrated ability to lead technical security initiatives.
• Familiarity with automotive development workflows.

Responsibilities

• Lead the design of cybersecurity architectures for automotive systems.
• Implement Software Update Management Systems compliant with UN regulations.
• Conduct threat analysis and risk assessments.

Skills

Automotive communication protocol security

Cryptographic engineering

Systems programming in C/C++/Rust

Education

7+ years of experience in cybersecurity architectures

Tools

Embedded debug tools

Vehicle network analysis tools

Job description

Applied Intuition, Inc. is powering the future of physical AI. Founded in 2017 and now valued at $15 billion, the Silicon Valley company is creating the digital infrastructure needed to bring intelligence to every moving machine on the planet. Applied Intuition services the automotive, defense, trucking, construction, mining and agriculture industries in three core areas: tools and infrastructure, operating systems, and autonomy. Eighteen of the top 20 global automakers, as well as the United States military and its allies, trust the company’s solutions to deliver physical intelligence.

We are an in‑office company and expect employees to primarily work from their Applied Intuition office five days a week. We recognize the importance of flexibility and trust employees to manage their schedules responsibly, including occasional remote work and the ability to begin the day with morning meetings from home or leave early when needed for family commitments.

About The Role

As a Security Architect at Applied Intuition, you will lead the design and implementation of cybersecurity architectures for next‑generation automotive systems, ensuring compliance with ISO/SAE 21434 cybersecurity engineering standards and UN Regulations 155/156 requirements. Working alongside embedded and application security engineers, you will establish security controls spanning silicon hardware, embedded systems, POSIX systems, networks, and cloud infrastructure for automotive platforms. This role requires deep technical expertise in automotive cybersecurity frameworks, hands‑on experience with secure development lifecycle (SDL) processes, and the ability to translate regulatory requirements into implementable security architectures.

At Applied Intuition, You Will

• Develop cybersecurity architectures compliant with ISO/SAE 21434 engineering requirements and UN R155 Cybersecurity Management System (CSMS) mandates across all vehicle lifecycle phases (concept, development, production, operation, decommissioning)
• Implement UN R156‑compliant Software Update Management Systems (SUMS) with secure OTA update mechanisms, cryptographic verification, and version control for automotive ECUs
• Conduct threat analysis and risk assessments (TARA) per ISO 21434 Annex C requirements, addressing 69 attack vectors identified in UN R155 Annex 5
• Design hardware‑rooted security controls for automotive SoCs including secure boot, hardware security modules (HSM), and TEE implementations
• Collaborate with suppliers to ensure Tier 1/Tier 2 component security meets ISO 21434 supply‑chain requirements and UN R155 post‑production obligations
• Develop automotive‑specific security requirements for AI/ML systems in autonomous driving platforms, addressing model integrity and adversarial attack prevention

We're Looking For Someone Who Has

• 7+ years of hands‑on experience designing and deploying security solutions for embedded automotive systems, with proven expertise in:
  • Automotive communication protocol security (CAN bus hardening, Ethernet intrusion detection)
  • Cryptographic engineering for resource‑constrained environments (ECC optimization, post‑quantum crypto prototyping)
• Proficiency in automotive security toolchains:
  • Embedded debug tools (JTAG, UART, Trace32)
  • Vehicle network analysis (Vector CANoe, Wireshark dissectors for SOME/IP)
  • ECU flashing and diagnostic tools (ODX/PDX scripting, UDS exploit development)
• Strong systems programming skills in C/C++/Rust for bare‑metal and RTOS environments, with experience in:
  • Secure over‑the‑air update implementations
  • Real‑time intrusion detection systems for vehicle networks
• Demonstrated ability to lead technical security initiatives, including:
  • Threat modeling for complex automotive architectures
  • Security code reviews for safety‑critical embedded software
  • Mentoring junior engineers in secure coding practices
• Familiarity with automotive development workflows:
  • AUTOSAR Classic/Adaptive security components

Nice To Have

• Contributions to open‑source automotive security projects (e.g., OpenXC, SavvyCAN)
• Experience with autonomous vehicle sensor security (LiDAR/Camera spoofing countermeasures)
• Background in hardware security evaluation (glitching, fault injection, TEMPEST)
• Development of vehicle‑specific penetration testing rigs (CAN bus injectors, ECU emulators)
• Public research on automotive vulnerabilities (CVEs, conference presentations, whitepapers)
• Secure boot implementation and hardware‑rooted trust chains (HSM provisioning, TEE architectures)
• Reverse engineering and vulnerability research on automotive firmware (ARM Cortex‑M/R, QNX, AUTOSAR)
• Experience with hardware security module integration
• Familiarity with CI/CD pipelines for ECU software with SBOM generation
• Familiarity with Hardware‑in‑the‑loop (HIL) security testing

Compensation at Applied Intuition for eligible roles includes base salary, equity, and benefits. Base salary is a single component of the total compensation package, which may also include equity in the form of options and/or restricted stock units, comprehensive health, dental, vision, life and disability insurance coverage, 401(k) retirement benefits with employer match, learning and wellness stipends, and paid time off. Note that benefits are subject to change and may vary based on jurisdiction of employment.

Applied Intuition pay ranges reflect the minimum and maximum intended target base salary for new hire salaries for the position. The actual base salary offered to a successful candidate will additionally be influenced by a variety of factors including experience, credentials & certifications, educational attainment, skill level requirements, interview performance, and the level and scope of the position.

If you’re excited about this role but your past experience doesn’t align perfectly with every qualification in the job description, we encourage you to apply anyway. You may be just the right candidate for this or other roles.

Applied Intuition is an equal opportunity employer and federal contractor or subcontractor. Consequently, the parties agree that, as applicable, they will abide by the requirements of 41 CFR 60‑1.4(a), 41 CFR 60‑300.5(a) and 41 CFR 60‑741.5(a) and that these laws are incorporated herein by reference. These regulations prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities, and prohibit discrimination against all individuals based on their race, color, religion, sex, sexual orientation, gender identity or national origin. These regulations require that covered prime contractors and subcontractors take affirmative action to employ and advance in employment individuals without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status or disability. The parties also agree that, as applicable, they will abide by the requirements of Executive Order 13496 (29 CFR Part 471, Appendix A to Subpart A), relating to the notice of employee rights under federal labor laws.