Staff/Senior Staff Software Engineer - Product Security

Zoox is looking for an AWS Cloud Security Engineer to lead the design and implementation of secure, scalable, and software-defined infrastructure in our AWS cloud environment. This role is responsible for establishing best-in-class security practices across AWS, driving automation-first infrastructure security, and partnering with engineering and platform teams to embed security into every layer of our technology stack.

You’ll act as a security champion, ensuring that infrastructure designs meet the highest standards of confidentiality, integrity, and availability — while maintaining operational efficiency and scalability through Infrastructure as Code (IaC).

In this role, you will

Define and own the multi-year security architecture and roadmap for Zoox's robots and fleet, spanning embedded/firmware, in-vehicle networks, cloud, and supporting infrastructure.

Partner with hardware, firmware, autonomy, and infrastructure engineering teams to embed security requirements into system design from the ground up, rather than bolting them on after the fact.

Lead threat modeling and architecture reviews for new vehicle platforms and major feature launches, identifying and prioritizing systemic risk across the fleet.

Set technical standards and guardrails - secure boot, key management, network segmentation, update/OTA security, and more - and drive their adoption across engineering teams.

Represent Product Security in cross-functional and leadership discussions, translating technical risk into business and safety impact for the organization.

Qualifications

10+ years of experience in security engineering, including significant time in an architect, staff, or technical lead capacity.

Deep expertise in embedded/IoT security, including secure boot, TPM/TEE, cryptographic key management, and hardened firmware/OS design.

Demonstrated experience architecting security for complex, physical/cyber-physical systems (automotive, robotics, aerospace, industrial control, or similar).

Strong track record of driving cross-functional technical strategy and influencing engineering leadership without direct authority.

Solid understanding of network security, cloud security, and secure software development lifecycle practices.

Bonus Qualifications

Experience securing autonomous vehicles, robotics platforms, or other safety-critical connected systems at scale.

Background in offensive security (red teaming, penetration testing) that informs strong architectural/defensive judgment.

Contributions to industry standards, published research, or conference talks in embedded/IoT/automotive security.