Senior Staff Security Product Architect

Job description

Job responsibilities

• Define End-to-End Security Onboard and Offboard Architecture: Design and specify end to end system-level security architectures and trust boundaries across vehicle hardware, onboard systems and software, safety…
• Lead Threat Modeling & Design Reviews: Direct threat modeling (e.g., TARA, STRIDE) and vulnerability analysis for complex autonomous cloud and compute systems, sensor suites, networks, and cloud infrastructure.
• Collaborate with Engineering & Product Teams: Work closely with Product Management, Software and Hardware Development, and Core Security teams to support security requirements and goal development while also…
• Engage with Suppliers and Tier 1 Partners: Drive architectural security requirements with hardware/software suppliers and Tier 1 development partners, ensuring third-party components and IP meet Aurora’s cybersecurity…
• Build Technical Security Roadmaps: Partner with program management, technical leads, and engineers to develop roadmaps for key security investments helping resolve cross-functional technical dependencies, and meet…
• Embed Security Assurance & Controls: Develop and enforce architectural security assurance, governance, and risk mitigation strategies into all phases of hardware and software product lifecycle.

Job requirements

• 15+ years of experience in security architecture, system security engineering, or product security roles within automotive, autonomous vehicles, embedded systems, or complex hardware/software systems.
• Bachelor’s or Master’s degree in Computer Science, Computer Engineering, Electrical Engineering, Cybersecurity, or a related STEM field.
• Deep technical domain expertise in embedded security principles , hardware security anchors (e.g., Secure Boot, ARM TrustZone, HSMs, TPMs), applied cryptography , and secure protocol design (e.g., SecOC, CAN/Ethernet…
• Proven experience performing architectural security assessments, system-level threat modeling, and secure design reviews for hardware and software platforms.
• Strong communication and technical leadership skills, with a demonstrated ability to influence cross-functional engineering teams and drive architectural decisions.
• Experience with and knowledge of automotive and cloud security standards and regulations, such as ISO/SAE 21434, ASPICE, ISO 27001 or UNECE R155/R156 .
• Strong foundation of experience to successfully engage, communicate and influence OEMs, Tier-1s, Suppliers, or commercial partners in order to further Aurora’s security posture.
• Practical experience designing secure systems between autonomous vehicle stacks, safety-critical ECUs, off-board telemetry/cloud infrastructures, cloud/cloud applications.