Senior Staff Software Engineer (Product Security)

Zoox; Foster City (CA); On-site; USD 170,000 - 260,000; Full time

Benefits offered by this job

Paid parental leave

Affinity groups and sports clubs

Work from home opportunities

Health insurance

Wellbeing program and flexible PTO

Equity upside

Job summary

Zoox is seeking a Staff Product Security Engineer to define and drive the long-term security strategy for our robots and fleet. You will own the vision for the robot security roadmap across current-generation vehicles and future platforms, setting the technical direction to keep the autonomous fleet resilient against real-world threats.

You will partner with hardware, firmware, autonomy, and infrastructure engineering teams to embed security requirements from the ground up, lead threat modeling,

Qualifications

• Architecting security for complex physical/cyber-physical systems.
• Drive cross-functional technical strategy with engineering leadership.
• Strong knowledge of network and cloud security and SDLC practices.
• 10+ years of experience in security engineering in senior roles.
• Deep embedded/IoT security expertise (secure boot, TPM/TEE, key management).
• Experience securing autonomous vehicles or safety-critical systems at scale.
• Background in offensive security informing defensive judgment.
• Contributions to industry standards or published security work.

Responsibilities

• Define and own multi-year security architecture and roadmap for Zoox’s robots and fleet.
• Partner with hardware, firmware, autonomy, and infra teams to embed security in system design from the ground up.
• Lead threat modeling and architecture reviews for new vehicle platforms and major feature launches.
• Set technical standards and guardrails (secure boot, key management, network segmentation, OTA security) and drive their adoption.
• Represent Product Security in cross-functional and leadership discussions, translating risk into business impact.

Skills

Security architecture

Cross-functional strategy

Network security

Secure SDLC

Embedded/IoT security

Autonomous vehicles security

Red team / pentesting

Industry standards contributions

Job description

• Zoox is looking for a Staff Product Security Engineer to define and drive the long-term security strategy for our robots and fleet


• Reporting into the Product Security organization, this person will own the vision for our robot security roadmap - from our current-generation vehicles to next-generation platforms - setting the technical direction that keeps our autonomous fleet resilient against real-world threats


• This is a high-impact, high-visibility role for someone who wants to shape how security is architected into every layer of a physical, safety-critical robotic system


• Define and own the multi-year security architecture and roadmap for Zoox’s robots and fleet, spanning embedded/firmware, in-vehicle networks, cloud, and supporting infrastructure


• Partner with hardware, firmware, autonomy, and infrastructure engineering teams to embed security requirements into system design from the ground up, rather than bolting them on after the fact


• Lead threat modeling and architecture reviews for new vehicle platforms and major feature launches, identifying and prioritizing systemic risk across the fleet


• Set technical standards and guardrails - secure boot, key management, network segmentation, update/OTA security, and more - and drive their adoption across engineering teams


• Represent Product Security in cross-functional and leadership discussions, translating technical risk into business and safety impact for the organization

Benefits

• Paid parental leave


• Affinity groups and sports clubs


• Work from home opportunities


• Health insurance


• Our crew’s health and happiness is our first priority. We offer comprehensive health and mental health support, a wellbeing program, and unlimited and flexible paid time away


• We invest in our crew—and their families—for the long term. That includes generous family planning support, caregiver support, and strong cash compensation with great equity upside


• We look after our crew when they’re in the office too. Our famous food program is a great example, featuring a daily changing menu of local and sustainable dishes


• There’s a busy calendar of social events at Zoox, with more sports teams than you can count. And, of course, playing with robots is an important part of the job description

Requirements

• Demonstrated experience architecting security for complex, physical/cyber-physical systems (automotive, robotics, aerospace, industrial control, or similar)


• Strong track record of driving cross-functional technical strategy and influencing engineering leadership without direct authority


• Solid understanding of network security, cloud security, and secure software development lifecycle practices


• 10+ years of experience in security engineering, including significant time in an architect, staff, or technical lead capacity


• Deep expertise in embedded/IoT security, including secure boot, TPM/TEE, cryptographic key management, and hardened firmware/OS design


• Experience securing autonomous vehicles, robotics platforms, or other safety-critical connected systems at scale


• Background in offensive security (red teaming, penetration testing) that informs strong architectural/defensive judgment


• Contributions to industry standards, published research, or conference talks in embedded/IoT/automotive security

You do not need to match every listed expectation to apply for this position. Here at Zoox, we know that diverse perspectives foster the innovation we need to be successful, and we are committed to building a team that encompasses a variety of backgrounds, experiences, and skills