Staff Software Engineer - Vehicle & Hardware Security
Cssmerge · San Francisco, CA
About this role
## Who we are Pronto AI is a global leader in commercializing autonomous vehicle (AV) technology, deploying Autonomous Haulage Systems (AHS) that automate operations in mines, quarries, and construction sites worldwide. While much of the industry remains in R&D, we deliver real, production-ready autonomy that is already operating in the field. We’re on a mission to make mining operations safer, smarter, and more efficient through cutting-edge technology—and we’re building toward becoming the world’s first profitable AV technology company. --- ## What you’ll do As a **Staff Software Engineer focused on Vehicle & Hardware Security**, you’ll own the security of the systems that make our vehicles operate safely—from in-vehicle networks and ECU firmware to secure boot and over-the-air updates. You’ll serve as the senior security partner to our vehicle engineering teams while helping set the technical direction and operating cadence for the broader security team. **Key responsibilities:** - Threat model and secure automotive Ethernet, CAN, and CAN-FD networks against message injection, spoofing, replay, and other vehicle-network attacks. - Design and review ECU security controls including secure boot, firmware code signing, and anti-rollback protections across vehicle compute systems. - Secure the OTA update pipeline, including update signing, staged and canary rollouts, rollback protection, and tamper detection. - Partner with hardware and manufacturing teams to identify and mitigate supply-chain risks, including counterfeit or tampered vehicle components. - Represent Security in vehicle architecture and engineering design reviews, identifying security requirements early in the development lifecycle. - Own incident-response strategies for compromised or potentially compromised vehicles, including safe remote isolation and quarantine procedures. - Provide technical leadership across the security organization, helping establish priorities, engineering standards, and team operating practices. - As the team grows, help lead a broader security team through technical direction, hiring, mentorship, and quarterly planning. --- ## What we’re looking for We’re looking for a deeply technical security engineer who understands both how modern vehicles are built and how they can be attacked. You should be comfortable moving between embedded software, vehicle networks, firmware, hardware, and security architecture while serving as a trusted technical partner to vehicle engineering leadership. --- ## Basic qualifications - **7+ years** of experience in security engineering, including at least **3 years** working in automotive, embedded systems, or industrial IoT security. - Hands-on experience with automotive communication protocols including **CAN/CAN-FD** and **UDS**. - Experience with automotive security testing tools such as **SocketCAN, CANoe, Kayak**, or equivalent tooling. - Production experience securing **OTA firmware/software update** systems. - Experience with **secure boot, code signing, firmware integrity, and rollback protection**. - Working knowledge of **ISO/SAE 21434** and how automotive cybersecurity requirements integrate into the software and hardware development lifecycle. - Experience leading technical projects, teams, or security programs and influencing senior engineering stakeholders. - Strong communication skills and the ability to clearly communicate security risks, tradeoffs, and technical direction. --- ## Nice to have
Listing freshness
CronJobs last confirmed this listing 2h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.