As an Embedded Security Engineer, you identify and own a project from design to launch as an important contributor/leader. You contribute to project scoping, manage relevant project priorities, and allocate technical resources within the project. You build security tools or POCs of complex concepts for analysis of security vulnerabilities or remediations. You lead the design and implementation of complete production security features for Waymo products and services. You perform architecture, design reviews of large, complete projects that may span multiple components, producing threat models and associated security requirements for those projects. You perform code reviews of a larger project, evaluating the security of the implementation and providing remediation recommendations. You guide efforts to develop new security designs and strategies across the multiple areas covered by Waymo's products and services, including base vehicle, SDS, mobile applications and offboard. You lead security exercises to simulate attacks, test and identify opportunities for engineering to improve protection, detection, and response capabilities, and identify how attackers can access Waymo's products and services. You collaborate and influence across teams with similar goals to align resources and direction, sharing insights and approaches frequently across immediate work groups and the broader organization. You are expected to uphold, champion, and exemplify the Waymo values.

In this hybrid role you will report to the Head of Cyber Security.

You will:

• Collaborate with engineering on security during design/testing
• Develop security related tooling for security and engineering teams
• Perform technical security assessments, code audits and design reviews.
• Help with technical solutions to reduce security vulnerabilities.
• Conduct research to identify new attack vectors against Waymo products and services.
• Develop Threat Models using industry best practices
• Create security requirements for Waymo engineering and suppliers

You have:

• Bachelor's degree or Master's degree in Computer Science, or a related technical field, or equivalent practical experience.
• 10+ years of experience in product security and system security.
• Foundation in, and in-depth technical knowledge of, security engineering, computer and network security, authentication, security protocols and applied cryptography.
• Experience with attacks and mitigation methods
• Solve large, open-ended problems.

We prefer:

• Embedded Security experience
• Experience in operating system internals and hardening (e.g. Linux, Android)
• Experience in code auditing
• Experience writing security requirements
• Experience with HW security
• Software development experience in C++
• Experience with network protocols and secure network design

#LI-Hybrid