Skip to content
ZooxZooxFoster City, CA

Senior Product Security Engineer - QRA

Conduct quantitative risk assessments, threat modeling, and cybersecurity standards analysis across autonomous vehicles and cloud services. The role requires a master’s degree, 7+ years of experience, strong systems and embedded-security expertise, and the ability to produce high-quality technical and regulatory deliverables.

217k – 307k/yr
Hybrid7+ YOESecurity Engineering

About the role

Responsibilities

  • Perform Quantitative Risk Assessment by quantifying security-related safety risks and collaborating with cross-functional teams, particularly safety teams, to align safety and security objectives and support risk-informed engineering decisions.
  • Conduct security analysis, threat modeling, and risk assessment for a complex product ecosystem comprising a custom vehicle fleet and cloud services.
  • Define cybersecurity requirements and maintain a catalog of cybersecurity controls to establish secure baselines.
  • Collaborate with Product Security, software engineering, and hardware engineering teams while incorporating engineering constraints into analyses and recommendations.
  • Analyze existing and emerging cybersecurity standards and develop adoption plans focused on tangible business impact.

Requirements

  • Master’s degree in computer science or a related software, hardware, or systems engineering field.
  • 7+ years of professional experience.
  • Strong systems engineering background with demonstrated cybersecurity expertise.
  • Experience with quantitative risk assessment frameworks, such as EPSS, attack-tree or attack-graph quantification, Monte Carlo simulations, and Bayesian networks.
  • Experience analyzing complex embedded systems and producing high-quality written deliverables.
  • Practical use of AI/LLM toolchains for security analysis and authoring regulatory work products.

Nice-to-Haves

  • Practical experience with ISO 21434, UNECE R155, NIST CSF, SOC 2 Type II, or similar frameworks and standards.
  • Experience analyzing complex cyber-physical systems and automotive systems-on-chip, including on-chip security features and onboard communication interfaces such as UDS, JTAG, CAN/LIN, I2C, and SPI.
  • Familiarity with common cloud deployment architectures and frameworks.

Skills

CybersecuritySystems Engineeringquantitative risk assessmentThreat Modelingepssmonte carlo simulationbayesian networksEmbedded Systemsiso 21434unece r155nist csfSOC 2can/lincloud architectureai/llm

Similar roles

Security Engineering jobs
Databricks

Senior Manager, Identity & Access Management (IAM)

DatabricksMountain View, CA

Leads IAM teams to build and operate enterprise identity, authentication, authorization, and governance systems at global scale. Requires 8-12+ years experience in security/identity engineering, deep IAM expertise, cloud architecture (AWS/GCP/Azure), and Zero Trust principles.

217k – 265k/yrOn-site8+ YOESecurity Engineering
Plaid

Engineering Manager - Security

PlaidSeattle, WA +2

Founding leader to build Plaid's Detection and Response team from scratch. Manage analysts and engineers on detection infrastructure, AI triage, incident response, Red Teaming, and Fraud Operations while partnering with the CISO to strengthen security posture.

216k – 329k/yrHybrid8+ YOESecurity Engineering
OpenAI

Corporate Security Program Manager

OpenAISan Francisco, CA

The Corporate Security Program Manager leads development and global implementation of security programs, runbooks, SOPs, and governance frameworks at OpenAI. Requires 7+ years in security operations or program management, strong cross-functional collaboration, and expertise in physical security, vendor management, and scaling operational processes.

216k – 240k/yrOn-site7+ YOESecurity Engineering
Fluidstack

Security Engineer, Network

FluidstackAustin, TX +3

Design and defend network security architecture for AI compute infrastructure at gigawatt scale, including segmentation, detection, and OT hardening across data centers, corp, and cloud. Requires experience securing large production networks with IT/OT mix, packet analysis, IaC for security controls, and real intrusion detection.

218k – 252k/yrOn-site7+ YOESecurity Engineering
Scale AI

Senior Software Engineer, Identity

Scale AISan Francisco, CA +2

Build and drive design of core identity infrastructure including authentication (SSO, MFA, SAML/OAuth/OIDC), authorization (ReBAC/ABAC/RBAC with OpenFGA/Authzed), and governance for compliance at an AI data platform powering leading LLMs. Requires 5+ years in identity/infrastructure engineering with distributed systems and cloud expertise.

216k – 270k/yrHybrid5+ YOESecurity Engineering