Senior Product Security Engineer - Threat & Risk Lead

Zoox; Foster City (CA); On-site; USD 217,000 - 307,000; Full time

Benefits offered by this job

Zoox Stock Appreciation Rights

Amazon RSUs

Health insurance

Paid time off

Disability insurance

Life insurance

Job summary

Zoox is seeking a Product Security Threat Analysis expert to drive structured security analyses of Zoox products and to apply security standards across the System Development Life Cycle. You will translate analyses into high-quality written deliverables and evaluate threats across automotive wireless and wired channels.

This role requires a strong systems engineering background with cybersecurity expertise and experience applying ISO/UNECE/NIST frameworks while collaborating with

Qualifications

• Master’s degree in CS or related engineering field (software, hardware, systems) and 7+ years of experience.
• Strong general systems engineering background with cybersecurity expertise.
• Experience with quantitative risk assessment frameworks (e.g., EPSS, Attack trees/graph quantification, Monte Carlo simulations, Bayesian networks).
• Experience with security analysis of complex embedded systems and turning the analysis into high-quality written deliverables.
• Pragmatic adoption of AI/LLM toolchains for security analysis and regulatory work products.

Responsibilities

• Perform Quantitative Risk Assessment by quantifying security-related safety risks and aligning with safety teams.
• Carry out security analysis, threat modeling, and risk assessment for our product ecosystem (vehicle fleet and cloud services).
• Define cybersecurity requirements and maintain a catalog of cybersecurity controls to establish secure baselines.
• Interface with engineering teams within Product Security and across software/hardware to factor constraints into analysis and recommendations.
• Analyze existing and emerging cybersecurity standards and distill plans for adoption with tangible business impact.

Skills

Systems engineering

Cybersecurity expertise

Threat modeling

Risk assessment

AI/LLM tooling for security analysis

Education

Master’s degree in CS or related engineering field

Job description

Zoox is seeking a Product Security Threat Analysis expert to drive structured security analyses of Zoox products and to apply security standards across the System Development Life Cycle. You will translate analyses into high-quality written deliverables and evaluate threats across automotive wireless and wired channels.

This role requires a strong systems engineering background with cybersecurity expertise and experience applying ISO/UNECE/NIST frameworks while collaborating with