Staff/Senior Staff Software Engineer - Product Security

Zoox is looking for a Staff Product Security Engineer to define and drive the long-term security strategy for our robots and fleet. Reporting into the Product Security organization, this person will own the vision for our robot security roadmap - from our current-generation vehicles to next-generation platforms - setting the technical direction that keeps our autonomous fleet resilient against real-world threats. This is a high-impact, high-visibility role for someone who wants to shape how security is architected into every layer of a physical, safety-critical robotic system.

About Zoox

Zoox is developing the first ground-up, fully autonomous vehicle fleet and the supporting ecosystem required to bring this technology to market. Sitting at the intersection of robotics, machine learning, and design, Zoox aims to provide the next generation of mobility-as-a-service in urban environments. We’re looking for top talent that shares our passion and wants to be part of a fast-moving and highly execution-oriented team.

Follow us on LinkedIn

A Final Note

You do not need to match every listed expectation to apply for this position. Here at Zoox, we know that diverse perspectives foster the innovation we need to be successful, and we are committed to building a team that encompasses a variety of backgrounds, experiences, and skills.

Responsibilities

Define and own the multi-year security architecture and roadmap for Zoox's robots and fleet, spanning embedded/firmware, in-vehicle networks, cloud, and supporting infrastructure.; Partner with hardware, firmware, autonomy, and infrastructure engineering teams to embed security requirements into system design from the ground up, rather than bolting them on after the fact.; Lead threat modeling and architecture reviews for new vehicle platforms and major feature launches, identifying and prioritizing systemic risk across the fleet.; Set technical standards and guardrails - secure boot, key management, network segmentation, update/OTA security, and more - and drive their adoption across engineering teams.; Represent Product Security in cross-functional and leadership discussions, translating technical risk into business and safety impact for the organization.

Requirements

10+ years of experience in security engineering, including significant time in an architect, staff, or technical lead capacity.; Deep expertise in embedded/IoT security, including secure boot, TPM/TEE, cryptographic key management, and hardened firmware/OS design.; Demonstrated experience architecting security for complex, physical/cyber-physical systems (automotive, robotics, aerospace, industrial control, or similar).; Strong track record of driving cross-functional technical strategy and influencing engineering leadership without direct authority.; Solid understanding of network security, cloud security, and secure software development lifecycle practices.

Nice to have

Experience securing autonomous vehicles, robotics platforms, or other safety-critical connected systems at scale.; Background in offensive security (red teaming, penetration testing) that informs strong architectural/defensive judgment.; Contributions to industry standards, published research, or conference talks in embedded/IoT/automotive security.