2 months ago
Houston, TX, USAEntry Level
Responsibilities
- Implement and maintain security controls for onboard vehicle systems, including secure boot, code signing, secrets and key management, secure OTA updates, and system hardening.
- Support security across Kubernetes, AWS, on-premises data centers, CI/CD pipelines, and internal developer platforms.
- Evaluate and implement protections for AI systems, including defenses against prompt injection, data exfiltration, model and supply-chain risks, and unsafe agent behavior.
- Build and maintain identity and access management, secrets management, and least-privilege authorization for services, devices, and fleet systems.
- Participate in threat modeling, security design reviews, and risk assessments, and help engineering teams address identified issues.
- Operate vulnerability management, dependency and supply-chain scanning, and secure software development lifecycle tooling and processes.
- Contribute to security detection, logging, monitoring, incident response, automation, documentation, and testing across onboard and infrastructure environments.
Requirements
- Bachelor's degree in Computer Science, Engineering, Cybersecurity, or a related field, or equivalent practical experience.
- 0–2 years of software engineering, security engineering, or related experience; internships, research, projects, and open-source contributions are welcomed.
- Programming experience in one or more of Python, Go, Rust, C, C++, JavaScript, or TypeScript.
- Foundational understanding of authentication and authorization, networking, operating systems, and common software security vulnerabilities.
- Familiarity with Linux and cloud or distributed systems, with an interest in securing production environments.
- Preferred experience includes cybersecurity, embedded systems, automotive, IoT, edge computing, containers, Kubernetes, AWS, Terraform, Pulumi, CI/CD, IAM, secrets management, PKI, zero-trust concepts, SAST, DAST, SBOMs, SIEM, vulnerability scanners, threat modeling, incident response, security research, or responsible vulnerability disclosure.
- Awareness of ISO/SAE 21434, NIST, OWASP, or SOC 2 security standards and frameworks is preferred.
Categories
About Bot Auto
Bot Auto develops and operates Level 4 autonomous trucks, selling freight capacity as Transportation-as-a-Service to shippers rather than licensing technology. The Houston-based, privately held company (founded 2023) owns the trucks and runs end-to-end operations, pairing fleet operators with autonomy engineers to deploy long-haul routes. Its platform spans autonomy software, vehicle controls, sensors, compute, and fleet operations with a documented safety case for commercial freight service.