Staff/Senior Staff Software Engineer - Product Security

Job description

Zoox is looking for a Staff Product Security Engineer to define and drive the long-term security strategy for our robots and fleet. Reporting into the Product Security organization, this person will own the vision for our robot security roadmap - from our current-generation vehicles to next-generation platforms - setting the technical direction that keeps our autonomous fleet resilient against real-world threats. This is a high-impact, high-visibility role for someone who wants to shape how security is architected into every layer of a physical, safety-critical robotic system. ### In this role, you will: - Define and own the multi-year security architecture and roadmap for Zoox's robots and fleet, spanning embedded/firmware, in-vehicle networks, cloud, and supporting infrastructure. - Partner with hardware, firmware, autonomy, and infrastructure engineering teams to embed security requirements into system design from the ground up, rather than bolting them on after the fact. - Lead threat modeling and architecture reviews for new vehicle platforms and major feature launches, identifying and prioritizing systemic risk across the fleet. - Set technical standards and guardrails - secure boot, key management, network segmentation, update/OTA security, and more - and drive their adoption across engineering teams. - Represent Product Security in cross-functional and leadership discussions, translating technical risk into business and safety impact for the organization. ### Qualifications - 10+ years of experience in security engineering, including significant time in an architect, staff, or technical lead capacity. - Deep expertise in embedded/IoT security, including secure boot, TPM/TEE, cryptographic key management, and hardened firmware/OS design. - Demonstrated experience architecting security for complex, physical/cyber-physical systems (automotive, robotics, aerospace, industrial control, or similar). - Strong track record of driving cross-functional technical strategy and influencing engineering leadership without direct authority. - Solid understanding of network security, cloud security, and secure software development lifecycle practices. ### Bonus Qualifications - Experience securing autonomous vehicles, robotics platforms, or other safety-critical connected systems at scale. - Background in offensive security (red teaming, penetration testing) that informs strong architectural/defensive judgment. - Contributions to industry standards, published research, or conference talks in embedded/IoT/automotive security.