Senior Product Security & Quant Risk Engineer

Zoox; Boston (MA); On-site; USD 191,000 - 271,000; Full time

Benefits offered by this job

Zoox Stock Appreciation Rights

Restricted Stock Units (RSUs)

Health insurance

Paid time off

Job summary

Zoox is seeking a Product Security Threat Analyst to conduct structured security analyses of Zoox products and apply security standards across the SDLC. You’ll translate analyses into high-quality written deliverables and evaluate threats across automotive wireless and wired channels.

You will perform quantitative risk assessments, threat modeling, and define cybersecurity requirements for a complex ecosystem of vehicles and cloud services, partnering with safety teams to align security with

Qualifications

• Master’s degree in CS or related engineering required.
• 5+ years of experience in security or systems engineering.
• Experience with quantitative risk assessment frameworks.
• Experience with security analysis of complex embedded systems.
• Pragmatic use of AI/LLM for security analysis and regulatory work.

Responsibilities

• Perform Quantitative Risk Assessment quantifying security-related safety risks with cross-functional teams.
• Conduct security analysis, threat modeling, and risk assessment for Zoox product ecosystem (vehicle fleet and cloud services).
• Define cybersecurity requirements and maintain a catalog of cybersecurity controls.
• Collaborate with engineering teams to understand constraints and inform analysis and recommendations.
• Analyze existing and emerging standards and distill a practical adoption plan.

Skills

Cybersecurity

Systems engineering

Written deliverables

Threat modeling

Risk assessment

AI/LLM tooling

Education

Master’s degree in CS or related engineering

Tools

EPSS

Attack trees/graph quantification

Monte Carlo simulations

Bayesian networks

Job description

Zoox is seeking a Product Security Threat Analyst to conduct structured security analyses of Zoox products and apply security standards across the SDLC. You’ll translate analyses into high-quality written deliverables and evaluate threats across automotive wireless and wired channels.

You will perform quantitative risk assessments, threat modeling, and define cybersecurity requirements for a complex ecosystem of vehicles and cloud services, partnering with safety teams to align security with