Product Security Engineer – QRA

Zoox

Product Security Engineer assessing cybersecurity risks for Zoox’s autonomous vehicle fleet and cloud ecosystem. Applying threat modeling and security standards across automotive systems and cloud services.

Posted 8/5/2026full-timeFoster City • California, Massachusetts, Washington • 🇺🇸 United StatesMid-LevelSenior💰 $191,000 - $271,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Expertise in Quantitative Risk Assessment and Cybersecurity, with a strong focus on analyzing complex systems and aligning safety and security objectives. Proficient in applying industry standards and frameworks to enhance security measures in autonomous vehicle systems and cloud services.

Highest-signal resume keywords

Quantitative Risk AssessmentCybersecurity AnalysisThreat ModelingISO 21434 ApplicationCloud Deployment Architecture

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

CybersecurityRisk AssessmentThreat ModelingSecurity AnalysisComplex Systems AnalysisCyber-Physical SystemsAutomotive SoCsOn-Chip Security FeaturesVulnerability AnalysisActionable Insights

Soft Skills

CollaborationCommunicationCross-Functional Teamwork

Tools & Technologies

UDSJTAGCAN/LINI2CSPICloud Services Ecosystem

Certifications & Qualifications

Master’s Degree in Computer ScienceNIST CSFSOC2 Type 2

Industry Keywords

Cybersecurity StandardsISO 21434UNECE R155Automotive SecurityCloud Security

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Perform Quantitative Risk Assessment by quantifying security-related safety risks and collaborating with cross-functional teams, particularly safety teams, to align safety and security objectives and support risk-informed engineering decisions
Conduct security analysis, threat modeling, and risk assessment for Zoox’s custom-designed autonomous vehicle fleet and cloud-services ecosystem
Translate conceptual findings into qualitative and quantitative risk assessments
Interface with Product Security, software engineering, and hardware engineering teams; understand engineering constraints and incorporate them into analyses and recommendations
Analyze current and emerging cybersecurity standards and create adoption plans focused on tangible business impact

Requirements

What you’ll need

Master’s degree in Computer Science or a related engineering field, such as software, hardware, or systems engineering
5+ years of experience
Strong understanding of cybersecurity, including specific vulnerabilities and attacks in software and cyber-physical domains
Demonstrated experience analyzing complex systems for cybersecurity and delivering impactful, actionable insights
Understanding of current and evolving cybersecurity standards for cloud and cyber-physical systems
Direct demonstrated experience applying ISO 21434, UNECE R155, NIST CSF, SOC2 Type 2, or similar frameworks and standards is advantageous
Prior security analysis experience with automotive SoCs, on-chip security features, onboard communications, and interfaces such as UDS, JTAG, CAN/LIN, I2C, and SPI is a bonus
Familiarity with common cloud deployment architecture and frameworks is a bonus

Benefits

Comp & perks

Paid time off, including sick leave, vacation, and bereavement
Unpaid time off
Zoox Stock Appreciation Rights
Amazon Restricted Stock Units (RSUs)
Health insurance
Long-term care insurance
Long-term and short-term disability insurance
Life insurance
Possible sign-on bonus