Zoox is looking for a Staff Product Security Engineer to define and drive the long-term security strategy for our robots and fleet. Reporting into the Product Security organization, this person will own the vision for our robot security roadmap - from our current-generation vehicles to next-generation platforms - setting the technical direction that keeps our autonomous fleet resilient against real-world threats. This is a high-impact, high-visibility role for someone who wants to shape how security is architected into every layer of a physical, safety-critical robotic system.
In this role, you will:
Define and own the multi-year security architecture and roadmap for Zoox's robots and fleet, spanning embedded/firmware, in-vehicle networks, cloud, and supporting infrastructure.
Partner with hardware, firmware, autonomy, and infrastructure engineering teams to embed security requirements into system design from the ground up, rather than bolting them on after the fact.
Lead threat modeling and architecture reviews for new vehicle platforms and major feature launches, identifying and prioritizing systemic risk across the fleet.
Set technical standards and guardrails - secure boot, key management, network segmentation, update/OTA security, and more - and drive their adoption across engineering teams.
Represent Product Security in cross-functional and leadership discussions, translating technical risk into business and safety impact for the organization.
Qualifications
10+ years of experience in security engineering, including significant time in an architect, staff, or technical lead capacity.
Deep expertise in embedded/IoT security, including secure boot, TPM/TEE, cryptographic key management, and hardened firmware/OS design.
Demonstrated experience architecting security for complex, physical/cyber-physical systems (automotive, robotics, aerospace, industrial control, or similar).
Strong track record of driving cross-functional technical strategy and influencing engineering leadership without direct authority.
Solid understanding of network security, cloud security, and secure software development lifecycle practices.
Bonus Qualifications
Experience securing autonomous vehicles, robotics platforms, or other safety-critical connected systems at scale.
Background in offensive security (red teaming, penetration testing) that informs strong architectural/defensive judgment.
Contributions to industry standards, published research, or conference talks in embedded/IoT/automotive security.
