Senior Product Security Engineer – QRA

Zoox

Senior Product Security Engineer conducting threat analysis and quantitative risk assessments for Zoox’s autonomous vehicle fleet and cloud services. Applying cybersecurity standards across the product development lifecycle.

Posted 8/5/2026full-timeFoster City • California, Massachusetts, Washington • 🇺🇸 United StatesSenior💰 $217,000 - $307,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Expertise in Quantitative Risk Assessment and Cybersecurity, with a strong focus on analyzing complex systems and applying relevant standards. Proven ability to collaborate with cross-functional teams to align safety and security objectives while delivering actionable insights.

Highest-signal resume keywords

Quantitative Risk AssessmentCybersecurity StandardsISO 21434 ApplicationAutomotive SoC AnalysisThreat Modeling

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cybersecurity AnalysisRisk AssessmentThreat ModelingVulnerability AnalysisCloud SecurityEngineering Constraints AnalysisSecurity Framework ApplicationCyber-Physical Systems UnderstandingImpactful Insights DeliverySafety and Security Alignment

Soft Skills

CollaborationCommunicationProblem-Solving

Tools & Technologies

Cloud Deployment ArchitectureUDSJTAGCAN/LINI2CSPI

Industry Keywords

Cybersecurity StandardsNIST CSFSOC 2 Type 2UNECE R155ISO 21434

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Perform Quantitative Risk Assessment by quantifying security-related safety risks and collaborate with cross-functional teams, particularly safety teams, to align safety and security objectives
Support risk-informed engineering decisions
Conduct security analysis, threat modeling, and risk assessment for Zoox’s custom-designed vehicle fleet and cloud services
Translate conceptual findings into qualitative and quantitative risk assessments
Interface with Product Security, software engineering, and hardware engineering teams
Build and maintain understanding of engineering constraints and incorporate them into analyses and recommendations
Analyze current and emerging cybersecurity standards and create adoption plans focused on tangible business impact

Requirements

What you’ll need

Master’s degree in Computer Science or a related engineering field such as software, hardware, or systems
7+ years of experience
Demonstrated engineering grasp of cybersecurity, including specific vulnerabilities and attacks in software and cyber-physical domains
Track record analyzing complex systems for cybersecurity and delivering impactful, actionable insights
Understanding of current and evolving cybersecurity standards for cloud and cyber-physical systems
Direct demonstrated experience applying ISO 21434, UNECE R155, NIST CSF, SOC 2 Type 2, or similar frameworks and standards is advantageous
Prior experience analyzing automotive SoCs, including on-chip security features, onboard communications, and interfaces such as UDS, JTAG, CAN/LIN, I2C, and SPI is a bonus qualification
Familiarity with common cloud deployment architecture and frameworks

Benefits

Comp & perks

Paid time off, including sick leave, vacation, and bereavement
Unpaid time off
Zoox Stock Appreciation Rights
Amazon Restricted Stock Units (RSUs)
Health insurance
Long-term care insurance
Long-term and short-term disability insurance
Life insurance
Potential sign-on bonus