Security Engineer Purple Team

You will assess and audit vehicle software for security vulnerabilities, lead security verification and validation, conduct penetration testing and risk assessments, implement or coordinate vulnerability fixes, and help design secure automotive and connected-vehicle systems.

Responsibilities

• Review, assess, and audit vehicle software platform code for security vulnerabilities
• Lead security verification and validation initiatives
• Set up benches for penetration tests and risk assessments
• Implement or coordinate remediation for identified vulnerabilities
• Design secure vehicle software and connected-vehicle architectures
• Conduct security testing and risk assessments
• Prioritize mitigation strategies based on risk
• Develop automotive products in line with ISO 21434 and UN R155 requirements
• Collaborate with engineering teams and customers to advance product security

Requirements

• 2+ years of industry experience in software engineering or product security engineering
• Bachelor's degree in Cybersecurity, Information Technology, Computer Engineering, Software Engineering, or equivalent
• Understanding of embedded systems
• Experience in penetration testing or security assessment of embedded systems
• Knowledge of Linux or QNX internals
• Security expertise in C, C++, x86, ARM, cryptography, or exploit development
• Experience with network security
• Proficiency in C/C++ or Python
• Understanding of hardware security primitives
• Experience with vulnerability databases and automated fuzzing frameworks
• Proficiency in code auditing and vulnerability research
• Experience performing formal risk assessments
• Ability to lead and coordinate security projects

Benefits

• Equity in the form of options and/or restricted stock units
• Health, dental, vision, life, and disability insurance
• 401k retirement benefits with employer match
• Learning and wellness stipends
• Paid time off