Software Engineer, Security Engineering

Bot Auto develops autonomous trucks and transportation technology. The Software Engineer, Security Engineering will help build and operate security across onboard vehicle systems, infrastructure, platforms, and AI systems, including security controls, identity and access management, threat modeling, vulnerability management, monitoring, and incident response.

What you'll do:

• Implement and maintain security controls for onboard (in-vehicle) systems, including secure boot, code signing, secrets and key management, secure over-the-air (OTA) updates, and system hardening
• Support security across infrastructure and platforms, including Kubernetes, public cloud (AWS), on-prem data centers, CI/CD pipelines, and internal developer platforms
• Help evaluate and implement protections for AI systems, including defenses against prompt injection, data exfiltration, model and supply-chain risks, and unsafe agent behavior
• Build and maintain identity and access management, secrets management, and least-privilege authorization for services, devices, and fleet systems
• Participate in threat modeling, security design reviews, and risk assessments, and partner with engineering teams to address identified issues
• Help operate vulnerability management, dependency and supply-chain scanning, and secure software development lifecycle (SSDLC) tooling and processes
• Contribute to security detection, logging, monitoring, and incident response across onboard and infrastructure environments
• Improve security through automation, documentation, testing, and close collaboration with software, platform, and autonomy engineering teams

What they're looking for:

• Bachelor's degree in Computer Science, Engineering, Cybersecurity, or a related field, or equivalent practical experience
• 0-2 years of software engineering, security engineering, or related experience; relevant internships, research, projects, or open-source contributions are welcome
• Programming experience in one or more languages such as Python, Go, Rust, C/C++, or JavaScript/TypeScript
• Foundational understanding of authentication and authorization, networking, operating systems, and common software security vulnerabilities
• Familiarity with Linux and cloud or distributed systems, with an interest in learning how to secure production environments
• Internship, coursework, project, or hands-on experience in cybersecurity, embedded systems, automotive, IoT, or edge computing
• Familiarity with containers, Kubernetes, AWS, infrastructure as code (Terraform, Pulumi), or CI/CD systems
• Interest in or exposure to AI/LLM security topics such as prompt injection, model supply chain, agent sandboxing, or AI guardrails
• Familiarity with IAM, secrets management, PKI, or zero-trust concepts
• Experience with security tooling such as SAST/DAST, dependency scanning, SBOMs, SIEM, or vulnerability scanners through work, coursework, or personal projects
• Awareness of security standards and frameworks such as ISO/SAE 21434, NIST, OWASP, or SOC 2
• Exposure to threat modeling, incident response, capture-the-flag exercises, security research, or responsible vulnerability disclosure