Staff Software Engineer - Vehicle & Hardware Security

Atoms•San Francisco, CA

3d•$224,000 - $284,000•Onsite

About The Position

Atoms is hiring a Staff Software Engineer focused on Vehicle & Hardware Security to own the security of systems that enable vehicles to operate safely, including in-vehicle networks, ECU firmware, secure boot, and over-the-air updates. The engineer will serve as a senior security partner to vehicle engineering teams and help set technical direction and operating practices for the broader security organization. The role includes threat modeling and securing automotive networks; designing ECU security controls and OTA update protections; partnering with hardware and manufacturing teams on supply-chain risks; representing Security in architecture and design reviews; and defining incident-response strategies for compromised or potentially compromised vehicles. As the team grows, the role may also provide technical direction, hiring, mentorship, and quarterly planning for a broader security team. The position is based onsite at Atoms’ San Francisco office, five days per week. The base salary range is $224,000–$284,000 per year. Compensation may also include equity awards and an annual performance-based bonus.

Requirements

7+ years of experience in security engineering, including at least 3 years working in automotive, embedded systems, or industrial IoT security.
Hands-on experience with automotive communication protocols, including CAN/CAN-FD and UDS.
Experience with automotive security testing tools such as SocketCAN, CANoe, Kayak, or equivalent tooling.
Production experience securing OTA firmware or software update systems.
Experience with secure boot, code signing, firmware integrity, and rollback protection.
Working knowledge of ISO/SAE 21434 and how automotive cybersecurity requirements integrate into the software and hardware development lifecycle.
Experience leading technical projects, teams, or security programs and influencing senior engineering stakeholders.
Strong communication skills and the ability to clearly communicate security risks, tradeoffs, and technical direction.

Nice To Haves

Experience securing Level 4 autonomous vehicle systems.
Familiarity with UNECE WP.29, R155, and R156 cybersecurity and software-update requirements.
Red-team, penetration-testing, or offensive-security experience focused on vehicles, embedded systems, or hardware.
Experience with hardware security, component integrity, or automotive supply-chain security.
Prior people-management experience or experience leading a dedicated security engineering team.

Responsibilities

Threat model and secure automotive Ethernet, CAN, and CAN-FD networks against message injection, spoofing, replay, and other vehicle-network attacks.
Design and review ECU security controls, including secure boot, firmware code signing, and anti-rollback protections across vehicle compute systems.
Secure the OTA update pipeline, including update signing, staged and canary rollouts, rollback protection, and tamper detection.
Partner with hardware and manufacturing teams to identify and mitigate supply-chain risks, including counterfeit or tampered vehicle components.
Represent Security in vehicle architecture and engineering design reviews, identifying security requirements early in the development lifecycle.
Own incident-response strategies for compromised or potentially compromised vehicles, including safe remote isolation and quarantine procedures.
Provide technical leadership across the security organization, helping establish priorities, engineering standards, and team operating practices.
As the team grows, help lead a broader security team through technical direction, hiring, mentorship, and quarterly planning.

Benefits

Medical, dental, and vision insurance, with multiple plans including HSA options.
Company-paid life and short- and long-term disability insurance.
Voluntary accident, critical illness, and hospital indemnity insurance.
Optional supplemental life insurance for employees, spouses, and children.
Pet insurance discount.
401(k).
Health Savings Account (HSA).
Flexible Spending Accounts for healthcare, dependent care, and commuter expenses.
Discretionary vacation days.
8 paid holidays per year.
Paid sick time.
Paid bereavement leave.
Paid parental leave.
Potential equity awards and an annual performance-based bonus.