Staff Software Engineer - Vehicle & Hardware Security
CloudKitchens3 hours ago
Base Salary
$224k - $284k/yr
Responsibilities
- Threat model automotive Ethernet, CAN, and CAN-FD networks against vehicle-network attacks.
- Design and review ECU security controls including secure boot, firmware code signing, and anti-rollback protections.
- Secure OTA update pipelines through signing, staged and canary rollouts, rollback protection, and tamper detection.
- Partner with hardware and manufacturing teams to mitigate counterfeit, tampered, and other vehicle-component supply-chain risks.
- Represent Security in vehicle architecture and engineering design reviews.
- Own incident-response strategies for compromised vehicles, including safe remote isolation and quarantine procedures.
- Set technical priorities, engineering standards, and operating practices across the security organization.
- Provide technical direction, hiring, mentorship, and quarterly planning as the security team grows.
Requirements
- 7+ years of security engineering experience, including at least 3 years in automotive, embedded systems, or industrial IoT security.
- Hands-on experience with CAN, CAN-FD, and UDS automotive communication protocols.
- Experience with SocketCAN, CANoe, Kayak, or equivalent automotive security testing tools.
- Production experience securing OTA firmware or software update systems.
- Experience with secure boot, code signing, firmware integrity, and rollback protection.
- Working knowledge of ISO/SAE 21434 and automotive cybersecurity integration into software and hardware development lifecycles.
- Experience leading technical projects, teams, or security programs and influencing senior engineering stakeholders.
- Strong communication skills for explaining security risks, tradeoffs, and technical direction.
- Experience securing Level 4 autonomous vehicle systems is preferred.
- Familiarity with UNECE WP.29, R155, and R156 requirements is preferred.
- Red-team, penetration-testing, or offensive-security experience focused on vehicles, embedded systems, or hardware is preferred.
- Experience with hardware security, component integrity, or automotive supply-chain security is preferred.
- Prior people-management experience or experience leading a dedicated security engineering team is preferred.
Benefits
- Medical, dental, vision, disability, and life insurance.
- Flexible Spending Account and Health Savings Account options.
- 401(k), equity eligibility, sick time, unlimited flexible time off, and paid holidays.
- Paid parental leave and a pre-tax commuter benefit plan.
- Team lunch in the SoMa office every Tuesday and Thursday.
- Based in the San Francisco office and onsite five days per week for office-based teams.
About CloudKitchens
CloudKitchens builds delivery-first commercial kitchen facilities and restaurant software for food and beverage operators. It leases turnkey kitchen space and provides tools for order management, delivery logistics, and multi-brand operations, enabling restaurants and entrepreneurs to expand with lower upfront costs. The company is privately held and headquartered in Los Angeles, serving markets across the U.S. with a mix of owned sites and enterprise solutions.