Staff/Senior Staff Software Engineer - Product Security

About The Role

Zoox is looking for an AWS Cloud Security Engineer to lead the design and implementation of secure, scalable, and software-defined infrastructure in our AWS cloud environment. This role is responsible for establishing best-in-class security practices across AWS, driving automation-first infrastructure security, and partnering with engineering and platform teams to embed security into every layer of our technology stack.

You’ll act as a security champion, ensuring that infrastructure designs meet the highest standards of confidentiality, integrity, and availability — while maintaining operational efficiency and scalability through Infrastructure as Code (IaC).

In This Role, You Will:

• Define and own the multi-year security architecture and roadmap for Zoox's robots and fleet, spanning embedded/firmware, in-vehicle networks, cloud, and supporting infrastructure.

• Partner with hardware, firmware, autonomy, and infrastructure engineering teams to embed security requirements into system design from the ground up, rather than bolting them on after the fact.

• Lead threat modeling and architecture reviews for new vehicle platforms and major feature launches, identifying and prioritizing systemic risk across the fleet.

• Set technical standards and guardrails - secure boot, key management, network segmentation, update/OTA security, and more - and drive their adoption across engineering teams.

• Represent Product Security in cross-functional and leadership discussions, translating technical risk into business and safety impact for the organization.

Qualifications And Requirements

• 10+ years of experience in security engineering, including significant time in an architect, staff, or technical lead capacity.

• Deep expertise in embedded/IoT security, including secure boot, TPM/TEE, cryptographic key management, and hardened firmware/OS design.

• Demonstrated experience architecting security for complex, physical/cyber-physical systems (automotive, robotics, aerospace, industrial control, or similar).

• Strong track record of driving cross-functional technical strategy and influencing engineering leadership without direct authority.

• Solid understanding of network security, cloud security, and secure software development lifecycle practices.

Bonus Qualifications

• Experience securing autonomous vehicles, robotics platforms, or other safety-critical connected systems at scale.

• Background in offensive security (red teaming, penetration testing) that informs strong architectural/defensive judgment.

• Contributions to industry standards, published research, or conference talks in embedded/IoT/automotive security.

Additional information

About Zoox Zoox is developing the first ground-up, fully autonomous vehicle fleet and the supporting ecosystem required to bring this technology to market. Sitting at the intersection of robotics, machine learning, and design, Zoox aims to provide the next generation of mobility-as-a-service in urban environments. We’re looking for top talent that shares our passion and wants to be part of a fast-moving and highly execution-oriented team.

Follow us on LinkedIn

Accommodations If you need an accommodation to participate in the application or interview process please reach out to accommodations@zoox.com or your assigned recruiter.

A Final Note: You do not need to match every listed expectation to apply for this position. Here at Zoox, we know that diverse perspectives foster the innovation we need to be successful, and we are committed to building a team that encompasses a variety of backgrounds, experiences, and skills.

• 10+ years of experience in security engineering, including significant time in an architect, staff, or technical lead capacity.

• Deep expertise in embedded/IoT security, including secure boot, TPM/TEE, cryptographic key management, and hardened firmware/OS design.

• Demonstrated experience architecting security for complex, physical/cyber-physical systems (automotive, robotics, aerospace, industrial control, or similar).

• Strong track record of driving cross-functional technical strategy and influencing engineering leadership without direct authority.

• Solid understanding of network security, cloud security, and secure software development lifecycle practices.

• Experience securing autonomous vehicles, robotics platforms, or other safety-critical connected systems at scale.

• Background in offensive security (red teaming, penetration testing) that informs strong architectural/defensive judgment.

• Contributions to industry standards, published research, or conference talks in embedded/IoT/automotive security.

Discovered directly from the employer’s public Lever Postings API. Full public description, role lists and additional information were normalized into safe candidate-facing content.