Staff Firmware Engineer, Platform Security

ALSO.; Sacramento (CA); On-site; USD 200,000 - 240,000; Full time

Benefits offered by this job

Health coverage

One Medical

Fertility benefits

Flexible time off

401(k) match

Job summary

ALSO is seeking a Staff Firmware Security Architect to own the technical direction of vehicle firmware security across ECU cohorts. You will lead secure boot, key management, network integrity, and trusted OTA while partnering with cloud, manufacturing, and firmware teams.

You will mentor engineers, drive threat modeling, and define reusable security libraries and CI integration to raise security standards across the organization.

Qualifications

• 8+ years in embedded firmware with ownership of secure boot, crypto, or vehicle/IoT security architecture.
• BS in Computer Science or Electrical Engineering; MS depth is a plus.
• Hands-on crypto with AES, ECC/RSA, HMAC, certificates on constrained MCUs.
• Experience shipping secure boot chains, OTA trust models, and platform-wide security.

Responsibilities

• Define secure boot architecture across MCU families and implement image signing and anti-rollback.
• Own on-device and fleet key strategy, PKI integration, and secure element usage.
• Lead CAN/CAN‑FD security design and policy for diagnostics and authenticated messaging.
• Own end-to-end OTA security including signed payloads and secure handoff to cloud signing.

Skills

Embedded firmware

Cryptography

C/C++

CAN/CAN-FD security

Education

BS in Engineering

MS depth (plus)

Tools

FreeRTOS

Zephyr

JTAG/SWD

HSM/secure element

Job description

Staff Firmware Security Architect

About ALSO.We’re ALSO, an electric mobility company originally conceived as a part of Rivian. We’re a passionate team of builders, dreamers, doers and innovators, focused on creating entirely new (not to mention, innovative and delightful) vertically integrated, small EVs designed to meet the global mobility challenges of today and tomorrow. Our mission is to inspire everyone to ride ALSO—replacing many local car, truck and SUV miles with ones on vehicles that are more affordable, more enjoyable and 10-50x more efficient.At ALSO, we are looking for a

to set the technical direction for our vehicle firmware security platform — secure boot, cryptographic key lifecycle, network integrity, and trusted OTA.You'd own the end-to-end security architecture that protects every ECU across our product portfolio, make the hard cross-cutting calls that product teams build on, and partner with cloud, manufacturing, and firmware teams to make security practical in CI, on the bench, and in production. You'd raise the bar for the entire organization through design leadership, mentorship, and hands‑on delivery of the most critical trust paths in the vehicle.

What You'll Do

Secure boot & root of trust: define secure boot architecture across MCU families (ROM → bootloader → app) — image signing, verification, anti-rollback, and debug/JTAG lockdown for production — setting the standard other ECU teams adoptKey storage & management: own the on-device and fleet key strategy (HSM/OTP/secure element), key hierarchy design, and integration with signing and PKI services across development, manufacturing, and fieldNetwork & bus integrity: lead CAN/CAN-FD security design (authentication, integrity, encryption where required), and establish policies for protected diagnostics and secure UDS access platform-wideOTA security: own end-to-end trust for firmware updates — signed/encrypted payloads, on‑device verification, rollback safety, and secure handoff between cloud signing infrastructure and vehicle update flowsPlatform security frameworks: architect reusable security libraries and APIs (crypto wrappers, secure storage, auth services) that product ECU teams adopt without reinventing trustThreat modeling & hardening: lead threat models across boot, update, and network attack surfaces, and partner with product and cloud teams on security reviews and production readinessValidation & cross-functional leadership: drive security test strategy (benchtop PoCs, negative tests, HIL scenarios), integrate critical checks into CI, mentor engineers on secure design, and align firmware, cloud, manufacturing, and systems stakeholders on requirements and trade-offs

What You'll Bring

8+ years in embedded software/firmware development, with deep ownership of secure boot, crypto, or vehicle/IoT security architecture, and a proven track record setting technical direction across multiple ECUs or products, not just one componentBS in an engineering discipline (Computer Science or Electrical Engineering preferred; MS or equivalent depth a plus)Hands‑on expertise with cryptographic primitives and embedded crypto (AES, ECC/RSA, HMAC, certificates) on constrained MCUs, including key provisioning, OTP/fuse programming, and HSM or secure element usage in productionExperience designing and shipping secure boot chains, bootloaders, signed firmware images, and OTA trust models in productionExperience securing vehicle or industrial networks (CAN/CAN‑FD, authenticated messaging, secure diagnostics) is a strong plusExpert‑level C/C++ on bare‑metal or RTOS (FreeRTOS, Zephyr, ThreadX, or similar), with deep comfort with linkers, memory maps, and debugging tools (JTAG/SWD)Ability to wire signing and verification into CI/release pipelines and drive platform‑wide adoptionExcellent communication skills — able to document security architecture, threat models, and runbooks, and mentor senior engineers; hardware‑in‑the‑loop testing and emulation experience is a plus

Salary

The salary for this position ranges from $200,000 - $240,000 per year, depending on experience, qualifications, and location.

Perks & Benefits

Robust health coverage — excellent health, dental and vision insurance covered up to 100% by ALSO with FSA & HSA optionsOne Medical membership and dedicated insurance advocatesRich fertility and family building benefits with ProgynyFlexible time off401(k) match

Why ALSO.

We’re passionate about helping the world find a better way to get there—wherever it is you’re headed.We’re located in the heart of Silicon Valley and have brought together a world‑class team from some of the biggest brands in the technology, automotive, cycling, outdoor recreation and retail spaces.Together we’re working hands‑on to imagine, design and build an entirely new solution to a global set of transportation challenges.