Embedded Security Engineer
Waymo
Waymo is an autonomous driving technology company with the mission to be the most trusted driver. Since its start as the Google Self-Driving Car Project in 2009, Waymo has focused on building the Waymo Driver—The World's Most Experienced Driver™—to improve access to mobility while saving thousands of lives now lost to traffic crashes. The Waymo Driver powers Waymo One, a fully autonomous ride-hailing service, and can also be applied to a range of vehicle platforms and product use cases. The Waymo Driver has provided over one million rider-only trips, enabled by its experience autonomously driving tens of millions of miles on public roads and tens of billions in simulation across 13+ U.S. states.
As an Embedded Security Engineer, you identify and own a project from design to launch as an important contributor/leader. You contribute to project scoping, manage relevant project priorities, and allocate technical resources within the project. You build security tools or POCs of complex concepts for analysis of security vulnerabilities or remediations. You lead the design and implementation of complete production security features for Waymo products and services. You perform architecture, design reviews of large, complete projects that may span multiple components, producing threat models and associated security requirements for those projects. You perform code reviews of a larger project, evaluating the security of the implementation and providing remediation recommendations. You guide efforts to develop new security designs and strategies across the multiple areas covered by Waymo's products and services, including base vehicle, SDS, mobile applications and offboard. You lead security exercises to simulate attacks, test and identify opportunities for engineering to improve protection, detection, and response capabilities, and identify how attackers can access Waymo's products and services. You collaborate and influence across teams with similar goals to align resources and direction, sharing insights and approaches frequently across immediate work groups and the broader organization. You are expected to uphold, champion, and exemplify the Waymo values.
In this hybrid role you will report to the Head of Cyber Security.
You will:
- Collaborate with engineering on security during design/testing
- Develop security related tooling for security and engineering teams
- Perform technical security assessments, code audits and design reviews.
- Help with technical solutions to reduce security vulnerabilities.
- Conduct research to identify new attack vectors against Waymo products and services.
- Develop Threat Models using industry best practices
- Create security requirements for Waymo engineering and suppliers
You have:
- Bachelor's degree or Master's degree in Computer Science, or a related technical field, or equivalent practical experience.
- 10+ years of experience in product security and system security.
- Foundation in, and in-depth technical knowledge of, security engineering, computer and network security, authentication, security protocols and applied cryptography.
- Experience with attacks and mitigation methods
- Solve large, open-ended problems.
We prefer:
- Embedded Security experience
- Experience in operating system internals and hardening (e.g. Linux, Android)
- Experience in code auditing
- Experience writing security requirements
- Experience with HW security
- Software development experience in C++
- Experience with network protocols and secure network design
#LI-Hybrid
The expected base salary range for this full-time position across US locations is listed below. Actual starting pay will be based on job-related factors, including exact work location, experience, relevant training and education, and skill level. Your recruiter can share more about the specific salary range for the role location or, if the role can be performed remote, the specific salary range for your preferred location, during the hiring process.
Waymo employees are also eligible to participate in Waymo’s discretionary annual bonus program, equity incentive plan, and generous Company benefits program, subject to eligibility requirements.
