Zoox
Senior Software Systems Engineer - Security
- Compensation
- $201K–$276K / yr
- Location
- Foster City, CA, US
- Arrangement
- Hybrid
- Employment type
- Full-time
- Level
- Senior
- Posted
- 5 August 2026 (about a month ago)
Checked about a month agoApplications go to the employer, never to RoleSprint
About this role
The Product Security team is responsible for conducting structured security analyses of Zoox products and applying security standards judiciously throughout the System Development Life Cycle at Zoox. The ideal candidate for this team will have a robust background in systems engineering, coupled with a demonstrated passion and expertise in cybersecurity.
In this role, you will: • Perform Risk Assessment by quantifying security related safety risks, collaborating with cross functional teams particularly safety teams to ensure alignment with safety and security objectives while supporting risk-informed engineering decisions.
• Drive verification of quantified risks by fuzzing real world scenarios in simulator environments.
• Write design proposals and drive execution while proactively communicating risks to partner teams.
• Proactively identify opportunities to roll up risk metrics into various company wide frameworks.
• Interface with a multitude of engineering teams within Product Security as well as across software and hardware engineering. Build and maintain a strong understanding of the underlying engineering constraints and factor that understanding into the analysis and recommendations.
Qualifications • Master’s degree in CS or related engineering field (software, hardware, systems) and 7+ years of experience
• A strong general systems engineering background along with a demonstrated passion and concrete expertise in cybersecurity
• Prior experience with quantitative risk assessment frameworks (eg: EPSS, Attack trees/graph quantification, Monte Carlo simulations, Bayesian networks)
• Prior experience with the risk analysis of complex embedded systems and a demonstrated skill in turning the analysis into high-quality written deliverables
• Pragmatic adoption of AI/LLM toolchains for security analysis and authoring high quality regulatory work products.
Bonus Qualifications • Experience with autonomous vehicle software stack (e.g., Perception, Prediction, Planning)
• Experience implementing large-scale evaluation pipelines
• Familiarity with common cloud deployment architecture and frameworks
About Zoox Zoox is developing the first ground-up, fully autonomous vehicle fleet and the supporting ecosystem required to bring this technology to market. Sitting at the intersection of robotics, machine learning, and design, Zoox aims to provide the next generation of mobility-as-a-service in urban environments. We’re looking for top talent that shares our passion and wants to be part of a fast-moving and highly execution-oriented team.
Follow us on LinkedIn
Accommodations If you need an accommodation to participate in the application or interview process please reach out to accommodations@zoox.com or your assigned recruiter.
A Final Note: You do not need to match every listed expectation to apply for this position. Here at Zoox, we know that diverse perspectives foster the innovation we need to be successful, and we are committed to building a team that encompasses a variety of backgrounds, experiences, and skills.
Work location
- Foster City, CA, US
Related jobs
Ready to make a decision?
This role is either worth your time or it isn’t.
Analyze the posting against your experience, see the gaps clearly, and build the right materials only if the opportunity makes sense.
Nothing is submitted automatically. You choose what happens next.
About this listing
Advertised by Zoox and published on Lever, the applicant tracking system they use.
RoleSprint is not the employer and not a recruiter. Applications are made on the employer’s own site and never reach us; what RoleSprint does is help you decide whether a role is worth your time and prepare for it if it is.
Published 5 August 2026, last checked about a month ago. A posting stops being advertised here 90 days after the employer published it, and one the employer takes down is marked closed rather than quietly removed.