2 months ago
Houston, TX, USASenior
Responsibilities
- Design and implement onboard security controls including secure boot, code signing, secrets and key management, secure OTA updates, and autonomous driving software hardening.
- Architect and operate security across Kubernetes, AWS, on-premises data centers, CI/CD pipelines, and internal developer platforms.
- Assess and protect large language models and agentic workflows against prompt injection, data exfiltration, model risks, and supply-chain risks.
- Build IAM, secrets management, and least-privilege authorization across services, devices, and the fleet.
- Perform threat modeling, security design reviews, and risk assessments while partnering with engineering teams to remediate findings.
- Establish vulnerability management, dependency and supply-chain scanning, and a secure software development lifecycle.
- Develop detection, logging, and incident response capabilities for onboard and infrastructure environments.
- Promote security practices through tooling, automation, documentation, and mentorship.
Requirements
- Bachelor’s degree in Computer Science, Engineering, or a related field, or equivalent experience.
- At least 5 years of hands-on software engineering experience with a strong focus on security.
- Strong software development skills in one or more of Python, Go, Rust, C, C++, or JavaScript/TypeScript.
- Understanding of applied cryptography, authentication and authorization, secure system design, and common vulnerability classes.
- Experience securing cloud infrastructure and/or distributed systems in production.
- Preferred experience with embedded, automotive, IoT, or onboard/edge security, including secure boot, TPM/HSM, code signing, and OTA updates.
- Preferred familiarity with Kubernetes, AWS, Terraform, Pulumi, CI/CD pipeline hardening, IAM, HashiCorp Vault, and zero-trust architectures.
- Preferred knowledge of AI/LLM security, prompt injection, model supply chains, agent sandboxing, and AI guardrail frameworks.
- Preferred hands-on experience with SAST/DAST, SBOM and dependency scanning, SIEM, detection engineering, threat modeling, and incident response.
- Preferred familiarity with ISO/SAE 21434, NIST, OWASP, and SOC 2.
Categories
About Bot Auto
Bot Auto develops and operates Level 4 autonomous trucks, selling freight capacity as Transportation-as-a-Service to shippers rather than licensing technology. The Houston-based, privately held company (founded 2023) owns the trucks and runs end-to-end operations, pairing fleet operators with autonomy engineers to deploy long-haul routes. Its platform spans autonomy software, vehicle controls, sensors, compute, and fleet operations with a documented safety case for commercial freight service.