Senior Product Security Engineer: Risk-Driven Embedded

Zoox; Foster City, Northern (CA, KY); Hybrid; USD 201,000 - 276,000; Full time

Job summary

Zoox is seeking a Product Security professional to conduct structured security analyses across the SDLC. The role emphasizes a strong systems engineering background and a passion for cybersecurity, with collaboration across software and hardware teams.

You will perform risk assessments, drive verification in simulators, write proposals, and translate risk metrics into company-wide frameworks, while navigating a fast-moving autonomous vehicle environment.

Qualifications

• Master’s degree in CS or related engineering field with 7+ years of experience.
• Strong systems engineering background with cybersecurity expertise.
• Experience with quantitative risk assessment frameworks and embedded systems risk.

Responsibilities

• Perform risk assessment by quantifying security related safety risks and aligning with safety objectives.
• Drive verification of quantified risks by fuzzing scenarios in simulators.
• Write design proposals and communicate risks to partner teams.
• Roll up risk metrics into company-wide frameworks.
• Interface with engineering teams to understand constraints and inform analysis.

Skills

Systems engineering

Cybersecurity

Quantitative risk assessment

Embedded systems

AI/LLM for security analysis

Education

Master’s degree in CS or related engineering

Tools

EPSS

Attack trees/graph quantification

Monte Carlo simulations

Bayesian networks

Job description

Zoox is seeking a Product Security professional to conduct structured security analyses across the SDLC. The role emphasizes a strong systems engineering background and a passion for cybersecurity, with collaboration across software and hardware teams.

You will perform risk assessments, drive verification in simulators, write proposals, and translate risk metrics into company-wide frameworks, while navigating a fast-moving autonomous vehicle environment.