Staff Security Engineer (Cloud, Mobile & PKI)
About The Position
We’re ALSO, an electric mobility company originally conceived as a part of Rivian. We’re a passionate team of builders, dreamers, doers and innovators, focused on creating entirely new (not to mention, innovative and delightful) vertically integrated, small EVs designed to meet the global mobility challenges of today and tomorrow. Our mission is to inspire everyone to ride ALSO—replacing many local car, truck and SUV miles with ones on vehicles that are more affordable, more enjoyable and 10-50x more efficient. We’re looking for a Staff Security Engineer with deep expertise in cloud, mobile, and PKI security to drive the next generation of our secure infrastructure and product ecosystem. You’ll serve as a technical leader - designing and scaling security solutions, building tooling for vulnerability management, and collaborating closely with firmware, software, Devops, and infrastructure teams to embed security into everything we build. This role is ideal for a seasoned engineer who thrives at the intersection of security architecture, software engineering, and cross-functional collaboration. The opportunity here is to lead, define and scale security foundations across diverse platforms, Influence over critical technical decisions at the architecture and product level, collaboration with top-tier firmware, cloud, and software engineers on cutting-edge technology.
Requirements
- 7+ years of experience in security engineering, including hands-on work with software systems.
- Strong programming experience in Python and Golang.
- Deep understanding of AWS security services (IAM, KMS, CloudTrail, Security Hub, etc.).
- Proven experience designing, deploying, and managing PKI and certificate infrastructure.
- Strong background in mobile application security (Android/iOS frameworks, secure communication, app hardening).
- Excellent analytical and problem-solving skills.
- Strong communication and collaboration across teams.
- Ability to influence and lead without direct authority.
Nice To Haves
- Experience with IoT or connected device ecosystems.
- Knowledge of cryptographic protocols (TLS, X.509, RSA, OCSP).
- Contributions to open-source security projects or internal tooling.
- Certifications such as AWS Security Specialty, CISSP, OSCP.
Responsibilities
- Develop and enforce cloud security frameworks, policies, and automation for threat detection and incident response and lead the design and implementation of secure architectures across AWS and mobile environments (Android, iOS).
- Partner with DevOps and product teams to integrate security into CI/CD pipelines, release processes and spearhead DevSecops Initiatives and conduct mobile app security assessments (static, dynamic, runtime), and guide teams on secure development practices.
- Architect, deploy, and maintain PKI systems that enable secure device identity, authentication, and communication, Develop automation and tooling to support certificate lifecycle management and hardware-backed security.
- Collaborate with firmware teams on secure boot, certificate provisioning, and cryptographic key management and evaluate emerging technologies (e.g., HSMs, TPMs, secure enclaves) for secure firmware integration.
- Own the end-to-end vulnerability management lifecycle, from detection to triage to remediation.
- Partner with developers to prioritize and fix vulnerabilities efficiently, providing expert-level guidance.
- Act as a security SME for engineering teams, providing technical guidance and mentorship, Lead threat modeling sessions, design reviews, and post-incident analyses.
- Drive security awareness and training initiatives across product and engineering organizations and represent the security function in architectural discussions and executive reviews.
Benefits
- Robust health coverage. Excellent health, dental and vision insurance covered up to 100% by ALSO with FSA & HSA options.
- One Medical membership and dedicated insurance advocates.
- Rich fertility and family building benefits with Progyny.
- Flexible time off.
- 401(k) match.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
Education Level
No Education Listed
Number of Employees
51-100 employees
