Security Engineer

Description

• Manage secrets and credentials securely across the fleet and development environments.
• Challenge the Status Quo: Question assumptions. Fix broken systems. Principles > rules.
• Continuously monitor, assess, and patch vulnerabilities across our embedded systems and infrastructure.
• Harden communication protocols and manage firewall rules to prevent unauthorized access and lateral movement.
• Design and maintain authentication mechanisms for device-to-cloud communication, including key rotation and certificate management.
• Help develop and enforce security policies and procedures to meet industry standards (e.g., NIST, ISO 27001).
• Collaborate with the software team to audit and improve code security, especially in fleet management and configuration tooling.
• Integrate security best practices into OTA update processes, ensuring updates are signed, validated, and securely distributed.
• Maintain documentation and risk assessments for all security-critical systems.
• Lead incident response and forensics in the event of a security breach or anomaly.

Requirements

• Experience with tools like Wireshark, Zeek, or OSQuery for network monitoring and threat detection.
• Bachelor’s degree in Computer Science, Cybersecurity, or related field.
• Experience with certificate-based authentication, TLS, VPNs, and firewalls.
• Proficiency in Python, C/C++, or Go.
• Strong knowledge of embedded Linux security and network security fundamentals.
• Excellent communication and collaboration skills in cross-functional teams.
• 3+ years of experience in security engineering, ideally in embedded, IoT, or industrial environments.
• Familiarity with secure OTA update frameworks and encryption best practices.

Benefits

• In-Person Only: We work full-time in the office. No hybrid. No remote.

Training + Development

Interview process

Visa Sponsorship

Security clearance