Staff Software Engineer - Vehicle & Hardware Security
CloudKitchens10 hours ago
Base Salary
$224k - $284k/yr
Responsibilities
- Threat model automotive Ethernet, CAN, and CAN-FD networks against vehicle-network attacks.
- Design and review ECU controls including secure boot, firmware code signing, integrity checks, and anti-rollback protections.
- Secure OTA update systems through signing, staged and canary rollouts, rollback protection, and tamper detection.
- Identify and mitigate vehicle hardware supply-chain risks with hardware and manufacturing teams.
- Represent Security in vehicle architecture and engineering design reviews.
- Own incident-response strategies for compromised or potentially compromised vehicles, including remote isolation and quarantine.
- Set technical priorities, engineering standards, and operating practices across the security organization.
- Provide technical direction, mentorship, hiring support, and quarterly planning as the security team grows.
Requirements
- 7+ years of security engineering experience, including at least 3 years in automotive, embedded systems, or industrial IoT security.
- Hands-on experience with CAN/CAN-FD and UDS automotive communication protocols.
- Experience with automotive security testing tools such as SocketCAN, CANoe, Kayak, or equivalent tools.
- Production experience securing OTA firmware or software update systems.
- Experience with secure boot, code signing, firmware integrity, and rollback protection.
- Working knowledge of ISO/SAE 21434 and automotive cybersecurity integration with software and hardware development lifecycles.
- Experience leading technical projects, teams, or security programs and influencing senior engineering stakeholders.
- Strong communication skills for explaining security risks, tradeoffs, and technical direction.
- Preferred experience with Level 4 autonomous vehicle systems, UNECE WP.29, R155, R156, vehicle or embedded red teaming and penetration testing, hardware security, component integrity, automotive supply-chain security, or people management.
Benefits
- Medical, dental, and vision insurance with multiple plans and HSA options.
- Company-paid short- and long-term life and disability insurance.
- Voluntary accident, critical illness, and hospital indemnity insurance, plus optional supplemental life insurance.
- Pet insurance discount and 401(k).
- Health Savings Account and flexible spending accounts for healthcare, dependent care, and commuting.
- Discretionary vacation, 8 paid holidays per year, paid sick time, bereavement leave, and parental leave.
- Based in San Francisco and onsite five days per week for office-based teams.
- Full-time exempt USA employee benefits; applications are accepted on an ongoing basis.
About CloudKitchens
CloudKitchens builds delivery-first commercial kitchen facilities and restaurant software for food and beverage operators. It leases turnkey kitchen space and provides tools for order management, delivery logistics, and multi-brand operations, enabling restaurants and entrepreneurs to expand with lower upfront costs. The company is privately held and headquartered in Los Angeles, serving markets across the U.S. with a mix of owned sites and enterprise solutions.