Senior Product Security Engineer: Threat Modeling & SDLC

Zoox; Seattle (WA); On-site; USD 217,000 - 307,000; Full time

Benefits offered by this job

Paid time off

Health insurance

Long-term disability insurance

Long-term care insurance

Life insurance

Job summary

Zoox seeks a seasoned security professional to lead threat analysis and security standards across a growing autonomous vehicle program. You will quantify security-related safety risks, perform threat modeling, and guide adoption of cybersecurity controls throughout the system development lifecycle.

You will collaborate with cross-functional teams including safety, software, and hardware engineering to deliver high-quality deliverables and actionable recommendations.

Qualifications

• Master’s degree in CS or related engineering field and 7+ years of experience.
• Strong systems engineering background with cybersecurity expertise.
• Experience with quantitative risk assessment frameworks (EPSS, attack trees/graph quantification, Monte Carlo simulations, Bayesian networks).
• Experience with security analysis of complex embedded systems and turning analysis into deliverables.
• Pragmatic adoption of AI/LLM toolchains for security analysis and regulatory work products.

Responsibilities

• Perform Quantitative Risk Assessment by quantifying security-related safety risks with cross-functional safety teams.
• Carry out security analysis, threat modeling, and risk assessment for a complex product ecosystem (vehicle fleet and cloud services).
• Define cybersecurity requirements and maintain a catalog of cybersecurity controls for secure baselines.
• Interface with engineering teams across software and hardware; understand engineering constraints and incorporate them into analyses and recommendations.
• Analyze existing and emerging cybersecurity standards and distill into a practical adoption plan with business impact.

Skills

Cybersecurity expertise

Systems engineering

Quantitative risk assessment

AI/LLM toolchains

Regulatory writing

Education

Master’s degree in CS or related engineering field

Tools

EPSS, Attack trees/graph quantification, Monte Carlo simulations, Bayesian networks

Security analysis of embedded systems

Job description

Zoox seeks a seasoned security professional to lead threat analysis and security standards across a growing autonomous vehicle program. You will quantify security-related safety risks, perform threat modeling, and guide adoption of cybersecurity controls throughout the system development lifecycle.

You will collaborate with cross-functional teams including safety, software, and hardware engineering to deliver high-quality deliverables and actionable recommendations.