Systems Security Engineer - Quantitative Risk Assessment

The role

This person will conduct structured security analyses of Zoox products and apply security standards across the System Development Life Cycle. The role centers on quantifying cybersecurity and safety risk for autonomous vehicles and ride hailing services.

What you will do

• Quantify security-related safety risks and collaborate with cross-functional teams, especially safety teams, to align safety and security objectives
• Validate and verify quantified risk models by designing and executing automated fuzzing pipelines and edge-case scenario testing in high-fidelity simulator environments
• Identify opportunities to aggregate and integrate cybersecurity risk metrics into governance, safety, and risk management frameworks
• Interface with engineering teams within Product Security and across software and hardware engineering
• Build and maintain an understanding of engineering constraints and factor it into analysis and recommendations
• Research state-of-the-art techniques to identify, analyze and defend against cybersecurity risks for autonomous vehicles and ride hailing services

Required qualifications

• PhD in Cybersecurity/CS or related engineering field (software, hardware, systems)
• Strong mathematical background with strong understanding of probabilistic risk modeling and frameworks
• Pragmatic adoption of AI/LLM toolchains for security analysis and authoring high quality regulatory work products

Nice to have

• Prior experience with quantitative risk assessment frameworks (eg: EPSS, Attack trees/graph quantification, Monte Carlo simulations, Bayesian networks)
• Prior experience with the risk analysis of complex embedded systems and a demonstrated skill in turning the analysis into high-quality written deliverables
• Familiarity with common cloud deployment architecture and frameworks

About the company

Zoox is developing the first ground-up, fully autonomous vehicle fleet and the supporting ecosystem to bring it to market. The company aims to provide next-generation mobility-as-a-service in urban environments.