Senior Information Security Engineer

About the role

Zoox is seeking a Senior Information Security Engineer to join their growing team in Foster City, California. This full-time role centers on safeguarding the company's information systems and protecting sensitive data across the organization. The Senior Information Security Engineer will work at the intersection of technology and risk management, helping to ensure that Zoox's autonomous mobility platform remains secure at every level. The position requires close collaboration with engineering, product, and operations teams to weave security considerations into every stage of product development, and the engineer will take ownership of complex security initiatives while providing guidance to less experienced team members.

Key facts

What you'll do

• Design and implement security controls for cloud-based infrastructure and services used by the company
• Conduct thorough security assessments and vulnerability analyses across applications and systems
• Collaborate with development teams to identify and remediate security issues in code
• Lead incident response efforts and coordinate with cross-functional teams during security events
• Develop and maintain security policies, standards, and documentation for the organization
• Perform threat modeling and risk assessments for new products and features before release
• Monitor security trends and emerging threats relevant to the autonomous vehicle industry
• Mentor junior security engineers and contribute to team knowledge sharing and growth
• Participate in security architecture reviews for upcoming engineering projects and provide actionable recommendations
• Drive security awareness and training initiatives across the organization to strengthen overall security culture
• Work with compliance and audit teams to ensure alignment with regulatory and industry requirements
• Research and evaluate new security tools and technologies to continuously improve defensive capabilities

Requirements

• Bachelor's degree in computer science, information security, or a closely related technical field
• Five or more years of professional experience in information security or a similar discipline
• Strong understanding of network security fundamentals including firewalls, intrusion detection, and access control mechanisms
• Hands-on experience with secure software development practices and common vulnerability categories such as OWASP top ten
• Familiarity with major cloud computing platforms and their native security and compliance features
• Ability to translate complex security findings into clear guidance for both technical and business audiences
• Demonstrated history of leading security projects and delivering measurable improvements to organizational security posture
• Comfort working in a fast-paced technology environment with shifting priorities and tight timelines
• Experience with security frameworks such as NIST or ISO 27001 and their practical application
• Excellent written and verbal communication skills for documenting findings and presenting to stakeholders

Nice to have

• Professional security certifications such as CISSP, CCSP, or equivalent GIAC credentials are valued
• Prior experience in autonomous vehicle, robotics, or connected systems security is a plus
• Working knowledge of data privacy regulations and industry-standard data protection and governance frameworks
• Background in threat intelligence research, proactive security testing, or offensive security methodologies is helpful

Skills & tools

• Security information and event management platforms for log analysis and monitoring
• Static and dynamic application security testing tools for code review
• Infrastructure-as-code security scanning and policy enforcement in CI/CD pipelines
• Identity and access management systems including single sign-on and multi-factor authentication
• Scripting proficiency in Python or Bash for security automation tasks
• Container and microservices security architectures including orchestration platform hardening and configuration management

Practical notes

• This role is based in Foster City, California and requires regular on-site attendance
• The position reports to the information security leadership team within Zoox
• Standard business hours are expected with occasional on-call duties for security incidents
• Zoox is an equal opportunity employer and actively encourages applications from candidates of all backgrounds and experience levels
• Candidates should be prepared to discuss their security experience and relevant projects during the interview process
• The company provides a collaborative work environment and values continuous learning and professional development

About the company

Zoox is building the world's most advanced self-driving hardware and software solution. The efficiency demands of such a system require an expert fine tuning of both the compute hardware architecture as well as the algorithms and middleware that runs on it to achieve maximum throughput at the most optimal power levels.