Senior Product Security Engineer

Security is critical to the overall safety of a self driving car (SDC) and the role of the security team is to protect Waymo’s autonomous vehicle and backend services from attackers.  We work closely with engineering and other teams across the organization on analyzing threats, recommending remediations and pen-testing the output.

In this Autonomous Vehicle Security role, you will help ensure the highest level of security of the Waymo autonomous vehicles by engaging with all stages of the development lifecycle, from design analysis to code reviews and assisting validation teams. 

Your goal will be to identify and help drive the remediation of security issues in product designs and/or implementations related to Waymo autonomous vehicles and its connected ecosystem.

Your responsibilities will include:

• Collaborate with engineering on security during design/development/testing

• Develop security related tooling for security and engineering teams

• Perform technical security assessments, code audits and design reviews.

• Assist with technical solutions to mitigate security vulnerabilities.

• Conduct research to identify new attack vectors against Waymo products and services.

• Develop Threat Models using industry best practices

• Generate security requirements for Waymo engineering and suppliers

At a minimum we’d like you to have:

• Bachelor's degree or Master’s degree in Computer Science, or a related technical field, or equivalent practical experience.

• 10+ years of experience in product security and system security.

• Foundation in, and in-depth technical knowledge of, security engineering, computer and network security, authentication, security protocols and applied cryptography.

• Experience with attacks and mitigation methods.

• Ability to thrive in ambiguity, solving large, open-ended problems

• Effective interpersonal and communication skills.

It’s preferred if you have 2 or more of the following:

• Embedded Security experience

• Experience in operating system internals and hardening (e.g. Linux, Android)

• Experience in code auditing

• Experience writing security requirements

• Solid understanding of HW security

• Software development experience in C++

• Experience with network protocols and secure network design