Staff/Senior Staff Software Engineer - Product Security
Posted Updated
Zoox is looking for a Staff Product Security Engineer to define and drive the long-term security strategy for our robots and fleet. Reporting into the Product Security organization, this person will own the vision for our robot security roadmap - from our current-generation vehicles to next-generation platforms - setting the technical direction that keeps our autonomous fleet resilient against real-world threats. This is a high-impact, high-visibility role for someone who wants to shape how security is architected into every layer of a physical, safety-critical robotic system.
In this role, you will:
- Define and own the multi-year security architecture and roadmap for Zoox's robots and fleet, spanning embedded/firmware, in-vehicle networks, cloud, and supporting infrastructure.
- Partner with hardware, firmware, autonomy, and infrastructure engineering teams to embed security requirements into system design from the ground up, rather than bolting them on after the fact.
- Lead threat modeling and architecture reviews for new vehicle platforms and major feature launches, identifying and prioritizing systemic risk across the fleet.
- Set technical standards and guardrails - secure boot, key management, network segmentation, update/OTA security, and more - and drive their adoption across engineering teams.
- Represent Product Security in cross-functional and leadership discussions, translating technical risk into business and safety impact for the organization.
Qualifications
- 10+ years of experience in security engineering, including significant time in an architect, staff, or technical lead capacity.
- Deep expertise in embedded/IoT security, including secure boot, TPM/TEE, cryptographic key management, and hardened firmware/OS design.
- Demonstrated experience architecting security for complex, physical/cyber-physical systems (automotive, robotics, aerospace, industrial control, or similar).
- Strong track record of driving cross-functional technical strategy and influencing engineering leadership without direct authority.
- Solid understanding of network security, cloud security, and secure software development lifecycle practices.
Bonus Qualifications
- Experience securing autonomous vehicles, robotics platforms, or other safety-critical connected systems at scale.
- Background in offensive security (red teaming, penetration testing) that informs strong architectural/defensive judgment.
- Contributions to industry standards, published research, or conference talks in embedded/IoT/automotive security.
About Zoox
Zoox is developing the first ground-up, fully autonomous vehicle fleet and the supporting ecosystem required to bring this technology to market. Sitting at the intersection of robotics, machine learning, and design, Zoox aims to provide the next generation of mobility-as-a-service in urban environments. We’re looking for top talent that shares our passion and wants to be part of a fast-moving and highly execution-oriented team.
Follow us on LinkedIn
Accommodations
If you need an accommodation to participate in the application or interview process please reach out to accommodations@zoox.com or your assigned recruiter.
A Final Note:
You do not need to match every listed expectation to apply for this position. Here at Zoox, we know that diverse perspectives foster the innovation we need to be successful, and we are committed to building a team that encompasses a variety of backgrounds, experiences, and skills.
Skills
As published by lever · 5 questions · 2 written answers
Basics
Resume/CV, Full name, Pronouns, Email, Phone, Current location, Current company, LinkedIn URL, Other website
Short answers (1)
- If you attended an on-campus or virtual event, which did you attend? optional
Pick from a list (2)
- Sponsorship: Do you require sponsorship, or will you require sponsorship in the future for employment authorization in the United States? optional
- How did you hear about us? optional
Written answers (2)
- What is your preferred first name and last name? If your legal first and last name is your preferred name, you do not need to respond. optional
- Export Control and Compliance: For the sole purpose of determining export licensing requirements, please list any countries of which you are a citizen or legal permanent resident, and when you obtained such status.