Security Engineer III - Project Based

Autonomous Solutions • Logan, UT

1d

About The Position

At ASI, we are revolutionizing industries with state-of-the-art autonomous robotics solutions. From construction to solar, we deliver technologies that enhance safety, productivity, and efficiency. With our core values of Simplicity, Safety, Transparency, Humility, Attention to Detail, Autonomy, and Growth guiding everything we do, we're shaping the future of automation in dynamic markets.
As a Security Engineer III, you will lead application security and over the wire security efforts across software, firmware, and network stacks, partnering with engineering teams to embed secure design, secure coding practices, and robust network protections into our products. You will help identify and remediate vulnerabilities in C, C++, and C# codebases, support secure communication protocols, integrate automated security testing into development workflows, and assist with documentation and validation efforts required for external audits and compliance frameworks such as SOC 2 and ISO 27001.
"This is a project-based employee role supporting the initial development phase of our autonomous vehicle platforms. Development phases of this nature typically span up to project completion (typically 2-4 years), though scope and duration are driven by business needs."

Requirements

• Bachelor's degree in Computer Science, Cybersecurity, Electrical Engineering, or a related field, or equivalent practical experience.
• 5+ years of experience in Application Security, Secure Software Engineering, or Vulnerability Management.
• Hands on exposure to securing software written in C, C++, and C#.
• Working knowledge of secure communications technologies including TLS, PKI, and certificate management.
• Familiarity with automated security testing tools such as SAST, DAST, or fuzzing platforms.
• Basic scripting experience using Python, Bash, or similar tools for automation and analysis.
• Understanding of common vulnerability classes including memory safety issues and secure coding practices.

Nice To Haves

• Exposure to audit support processes such as SOC 2 or ISO 27001 assessments is preferred.
• Familiarity with hardware rooted security technologies such as Secure Boot, TPMs, or HSMs is a plus.
• Strong analytical thinking and the ability to clearly communicate technical findings.

Responsibilities

• Identify common vulnerabilities such as those outlined in the OWASP Top 10 within C, C++, and C# codebases and assist with code reviews and security assessments under the guidance of senior engineers.
• Support secure communications by applying foundational knowledge of TLS, certificate handling, and encrypted network protocols while assisting in the implementation and validation of secure network protections.
• Operate and interpret results from automated security testing tools including SAST, DAST, and fuzzing platforms, documenting findings and working with engineering teams to verify remediation of lower complexity issues.
• Assist with vulnerability triage, remediation validation, and monitoring of runtime or network security alerts, escalating anomalies or higher risk issues when identified.
• Help integrate security tools into CI/CD workflows, contribute to documentation for vulnerabilities and remediation steps, and support evidence collection and preparation for external audits such as SOC 2 and ISO 27001.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 11-50 employees