Base Salary
$200k - $240k/yr
Responsibilities
- Define secure boot architecture across MCU families, including image signing, verification, anti-rollback, and production debug/JTAG lockdown.
- Own on-device and fleet key strategies, key hierarchies, and HSM/OTP/secure-element integration with signing and PKI services.
- Lead CAN/CAN-FD network security, including authentication, integrity, encryption, protected diagnostics, and secure UDS access.
- Own end-to-end firmware update trust, including signed and encrypted payloads, on-device verification, rollback safety, and cloud-to-vehicle handoff.
- Architect reusable security libraries and APIs for cryptographic wrappers, secure storage, and authentication services.
- Lead threat modeling and hardening across boot, update, and network attack surfaces.
- Drive security testing through benchtop proofs of concept, negative tests, hardware-in-the-loop scenarios, and CI checks.
- Partner with firmware, cloud, manufacturing, and systems teams on requirements, production readiness, and trade-offs.
- Mentor engineers and provide design leadership across the organization.
Requirements
- 8+ years of embedded software or firmware development experience with deep ownership of secure boot, cryptography, or vehicle/IoT security architecture.
- Proven experience setting technical direction across multiple ECUs or products.
- BS in an engineering discipline, preferably Computer Science or Electrical Engineering.
- Hands-on expertise with AES, ECC/RSA, HMAC, certificates, key provisioning, OTP/fuse programming, and HSM or secure element usage in production.
- Experience designing and shipping secure boot chains, bootloaders, signed firmware images, and OTA trust models in production.
- Vehicle or industrial network security experience, including CAN/CAN-FD, authenticated messaging, and secure diagnostics, is preferred.
- Expert-level C/C++ experience on bare-metal or RTOS platforms, with familiarity with linkers, memory maps, and JTAG/SWD debugging tools.
- Ability to integrate signing and verification into CI and release pipelines and drive platform-wide adoption.
- Strong communication, documentation, threat-modeling, runbook, and engineering mentorship skills.
- Hardware-in-the-loop testing and emulation experience is preferred.
Benefits
- Health, dental, and vision insurance covered up to 100% with FSA and HSA options.
- One Medical membership and dedicated insurance advocates.
- Fertility and family-building benefits through Progyny.
- Flexible time off.
- 401(k) match.
- Located in Silicon Valley.
About ALSO
We’re ALSO, an electric mobility company on a mission to build the world’s best small vehicles for moving people and goods, driven and autonomous. Originally incubated within Rivian, we’re rethinking transportation from first principles to create a new generation of smaller, smarter, and more connected electric vehicles. Our team combines automotive rigor with advanced software, autonomy, sensing, and vertically integrated EV technologies to build products designed around the realities of modern mobility. We believe small vehicles are not a niche category, but a foundational shift in how people, goods, and communities will move through the world in the decades ahead. At ALSO, details matter. We’re builders, technologists, designers, and dreamers who care deeply about craft, innovation, and the everyday experiences our products create. Because movement is more than transportation—it’s connection, culture, freedom, and collective impact. We’re building that future now.