Senior Software Engineer, Security Engineering New Houston, TX

Bot; Houston (TX); Hybrid; USD 150,000 - 190,000; Full time

Job summary

Bot Auto is seeking a Senior Software Engineer, Security Engineering to design, implement, and operate security across our autonomous trucking stack. You will secure onboard systems, cloud infrastructure, and AI components while shaping the security roadmap.

You will lead threat modeling, SSDLC, and incident response, collaborating with cross-functional teams to deploy robust security controls and mentor engineers across the organization.

Qualifications

• Bachelor's degree in CS/Engineering or equivalent experience.
• 5+ years hands-on software engineering with a security focus.
• Strong cryptography, authentication, secure design, and vulnerability knowledge.

Responsibilities

• Design and implement security controls for onboard systems (secure boot, code signing, OTA).
• Architect security across infra and platforms (Kubernetes, AWS, on-prem, CI/CD).
• Develop protections for AI systems, guardrails and monitoring for LLMs.
• Build IAM, secrets management, and least-privilege access.
• Perform threat modeling and security reviews with engineering teams.
• Establish SSDLC, vulnerability management, and supply-chain security.
• Develop detection, logging, and incident response capabilities.
• Champion security-first culture with tooling and mentorship.

Skills

Security engineering

Cloud security

Kubernetes

AWS

Threat modeling

CI/CD

SAST/DAST

Education

Bachelor's degree

Tools

HashiCorp Vault

Terraform

Pulumi

SIEM

Job description

Senior Software Engineer, Security Engineering

Houston, TX

Company Introduction

At Bot Auto, we are revolutionizing the transportation of goods with our cutting-edge autonomous trucks, enhancing the quality of life for communities around the globe. With the agility of a start-up and the wisdom of seasoned experts, Bot Auto boasts a team that has achieved numerous world-firsts and unparalleled innovations. United by a shared vision, we create miracles and propel the future of transportation. Join us and transform your dreams into reality.

We are seeking a highly skilled and motivated Senior Software Engineer, Security Engineering to design, build, and operate security across Bot Auto's autonomous trucking stack. The proprietary technology that powers our autonomous driving system is our core intellectual property, and protecting it — along with the safety-relevant systems behind our fleet — is mission critical. In this role, you will work across onboard (in-vehicle) security as well as infrastructure and platform security. You will also help shape how Bot Auto adopts AI responsibly: understanding the security implications of large language models and agentic systems, and developing the protections that let us innovate quickly and safely. As a hands‑on technical leader, you will embed security best practices into every layer of our systems, from the vehicle to the cloud.

Key Responsibilities

• Design and implement security controls for onboard (in-vehicle) systems, including secure boot, code signing, secrets and key management, secure over-the-air (OTA) updates, and hardening of the autonomous driving software stack.
• Architect and operate security across infrastructure and platforms, spanning Kubernetes, public cloud (AWS), on-prem data centers, CI/CD pipelines, and internal developer platforms.
• Develop protections for AI systems — assess the security implications of large language models and agentic workflows (prompt injection, data exfiltration, model and supply-chain risks) and build guardrails, sandboxing, and monitoring.
• Build identity and access management, secrets management, and least-privilege authorization across services, devices, and the fleet.
• Perform threat modeling, security design reviews, and risk assessments for new products and architectures, partnering with engineering teams to remediate findings.
• Establish vulnerability management, dependency and supply-chain scanning, and a secure software development lifecycle (SSDLC) across the organization.
• Develop detection, logging, and incident response capabilities to identify and respond to security events across onboard and infrastructure environments.
• Champion a security-first culture through tooling, automation, documentation, and mentorship.

Required Qualifications

• Bachelor's degree in Computer Science, Engineering, or a related field, or equivalent experience
• 5+ years of hands‑on software engineering experience, with a strong focus on security
• Solid understanding of applied cryptography, authentication and authorization, secure system design, and common vulnerability classes
• Experience securing cloud infrastructure and/or distributed systems in production

Preferred Qualifications

• Experience with embedded, automotive, IoT, or other onboard/edge security (secure boot, TPM/HSM, code signing, OTA updates)
• Familiarity with Kubernetes and cloud security (AWS), IaC security (Terraform, Pulumi), and CI/CD pipeline hardening
• Knowledge of AI/LLM security: prompt injection, model supply chain, agent sandboxing, and AI guardrail frameworks
• Experience with IAM, secrets management (e.g., HashiCorp Vault), and zero-trust architectures
• Hands‑on experience with security tooling: SAST/DAST, SBOM and dependency scanning, SIEM, and detection engineering
• Familiarity with security standards and frameworks (e.g., ISO/SAE 21434, NIST, OWASP, SOC 2)
• Experience with threat modeling and incident response

As set forth in Bot Auto’s Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law.

For government reporting purposes, we ask candidates to respond to the below self-identification survey.Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiringprocess or thereafter. Any information that you do provide will be recorded and maintained in aconfidential file.

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.