Security Engineer • Senior

Who you are

You have 5+ years of experience in cybersecurity engineering, particularly in the automotive or IoT sectors. Your background includes working with product security and conducting formal Threat Analysis and Risk Assessment (TARA) to define security requirements for vehicle ECUs and autonomous stacks. You are well-versed in developing data integrity standards for CAN and Automotive Ethernet, effectively blocking injection and spoofing attacks.

Your technical skills include proficiency in programming languages such as C, C++, and Rust, which you utilize for developing security automation and design validation tools. You have hands-on experience with Public Key Infrastructure (PKI), digital signatures, and encryption, particularly as they apply to Secure Boot and Over-The-Air (OTA) updates. You understand the importance of establishing a hardware-rooted Chain of Trust and have designed Hardware Security Module (HSM) integrations to achieve this.

You are familiar with securing IoT cloud architectures and managing secure data pipelines between edge devices and backends. Your experience includes specifying automated security testing requirements, including protocol fuzzing, for software build pipelines. You can translate high-level security goals into actionable engineering specifications alongside senior architects, ensuring that security is integrated into the development lifecycle.

What you'll do

In this role, you will be the main point of contact for product security, working directly with engineering teams to ensure that security is a priority throughout the development process. You will conduct formal TARA to define security requirements for vehicle ECUs and autonomous stacks, ensuring that all potential vulnerabilities are identified and addressed.

You will develop data integrity standards for CAN and Automotive Ethernet, implementing measures to block injection and spoofing attacks. Your responsibilities will also include performing threat modeling for new infrastructure, identifying vulnerabilities in fleet management and diagnostic tools, and specifying automated security testing requirements for the software build pipeline.

You will collaborate closely with senior architects to translate high-level security goals into actionable engineering specifications. Additionally, you will design Hardware Security Module (HSM) integrations to establish a hardware-rooted Chain of Trust and architect secure boot and OTA update mechanisms using cryptographic signing to prevent unauthorized code execution.

What we offer

Waabi offers a dynamic work environment where you can contribute to the future of self-driving technology. You will be part of a world-class team that values innovation and collaboration. We encourage you to apply even if your experience doesn't match every requirement, as we believe diverse perspectives lead to better solutions. Join us in making a positive impact on the world through cutting-edge AI technology.