Senior Security Engineer - Firmware

This Jobot Job is hosted by: Kendall ClarkAre you a fit? Easy Apply now by clicking the "Apply Now" button and sending us your resume.Salary: $120,000 - $190,000 per year

A bit about us:Our company powers the connected vehicle ecosystem with its Deep Connected Platform (DCP) for full vehicle software updates, data collection, remote commands and diagnostics. DCP supports any vehicle architecture - from ICE, Hybrid, EV to Fuel Cell - while also handling rigorous safety, security and compliance standards such as ISO 26262, GDPR and WP.29 (among others) required to operate in most countries.By combining powerful automotive software and data management tools in one platform, our company empowers OEMs to reduce recalls and warranty claims and address hundreds of connected vehicle use cases spanning fleet management, predictive maintenance, data monetization, owner personalization and beyond.

Why join us?We are a well-funded startup with competitive compensation for stellar talent.Maintaining work-life balance is critical for living our best lives. We offer flexible PTO to ensure our team takes the time they need for enjoying life outside of the workplace.We offer a 401K plan to help you build for your future today.We offer generous options for health, dental and vision plans to ensure you and your family are taken care of.In-office lunches are provided for all employees in addition to monthly company-sponsored meetups and events.Our employees have access to an educational stipend to take courses or programs to broaden your skillset in your field.

Job DetailsAbout the RoleAssist in defining security roadmap for all our products (OTA, logging, remote diagnostics) and deliver security product spec that includes requirements, design specifications and test plans for the software, and build integration teams.Support the Threat Analysis and Risk Assessment (TARA) for the Firmware teamPerform, review and prioritize remediation of vulnerabilities in the Firmware environment including Infrastructure, third party libraries within an embedded software environmentAnalyze cybersecurity attack entry points and evaluate risk versus impact, and then work with the software team to implement cybersecurity requirements as well as evaluate test and software analysis reports.Perform competitive analysis and maintain knowledge of emerging security technologies in both the automotive and consumer electronics field.Minimum QualificationsBS / MS in Computer Science or similar degree with 5+ years of relevant experience, technical cybersecurity expertise, and knowledge.Experience designing secure networks, systems, and application architectures.Experience planning and developing security policies, procedures, and standards.Broad comparative understanding of operating systems, networking technologies, and specific implementations - especially from a computer security perspective.Working knowledge of public key infrastructure (PKI) in medium to large environments to include key management, digital certificates, and digital signatures, across server and device certificatesWorking knowledge of managing and maintaining encryption cipher suites and impacts of different certificate standardsPreferred QualificationsFamiliarity with standards like ISO 27001, SSAE 16 / 18 SOC 2,Intimate knowledge of CIS Benchmarks for Cloud providers, container technologies and key servicesAbility to work in a fast-paced and agile development environment.Experience with cloud computing and security including Google Cloud Platform, Azure, AWS, Cloud Foundry or equivalent.Familiarity with secure coding practices, processes, and methodsExperience working with Cloud Posture Assessments, Container SecurityExperience with penetration testing and penetration tools.Strong customer focus and obsession with quality.Add positive energy in every meeting or interaction with your coworkers.Strong communication and analytical skillsInterested in hearing more? Easy Apply now by clicking the "Apply Now" button.