SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 224,000 - 284,000 / annual
Pronto AI is a global leader in commercializing autonomous vehicle technology, deploying Autonomous Haulage Systems (AHS) that automate operations in mines, quarries, and construction sites worldwide. The company delivers production-ready autonomy already operating in the field and is building toward becoming the world's first profitable AV technology company.
As a Staff Software Engineer focused on Vehicle & Hardware Security, you will own the security of the systems that make autonomous vehicles operate safely, from in-vehicle networks and ECU firmware to secure boot and over-the-air updates. You will serve as the senior security partner to vehicle engineering teams while helping set the technical direction and operating cadence for the broader security team.
Key responsibilities include:
- Threat modeling and securing automotive Ethernet, CAN, and CAN-FD networks against message injection, spoofing, replay, and other vehicle-network attacks
- Designing and reviewing ECU security controls including secure boot, firmware code signing, and anti-rollback protections across vehicle compute systems
- Securing the OTA update pipeline, including update signing, staged and canary rollouts, rollback protection, and tamper detection
- Partnering with hardware and manufacturing teams to identify and mitigate supply-chain risks, including counterfeit or tampered vehicle components
- Representing Security in vehicle architecture and engineering design reviews, identifying security requirements early in the development lifecycle
- Owning incident-response strategies for compromised or potentially compromised vehicles, including safe remote isolation and quarantine procedures
- Providing technical leadership across the security organization, helping establish priorities, engineering standards, and team operating practices
- As the team grows, helping lead a broader security team through technical direction, hiring, mentorship, and quarterly planning
You will work on real, production-deployed autonomy, build technology that directly improves safety and efficiency, tackle complex challenges in demanding real-world environments, and be part of a fast-moving team with high ownership and impact. The role is based in the San Francisco office with five-day-per-week onsite work.
**Requirements:**
- 7+ years of experience in security engineering, including at least 3 years working in automotive, embedded systems, or industrial IoT security
- Hands-on experience with automotive communication protocols including CAN/CAN-FD and UDS
- Experience with automotive security testing tools such as SocketCAN, CANoe, Kayak, or equivalent tooling
- Production experience securing OTA firmware or software update systems
- Experience with secure boot, code signing, firmware integrity, and rollback protection
- Working knowledge of ISO/SAE 21434 and how automotive cybersecurity requirements integrate into the software and hardware development lifecycle
- Experience leading technical projects, teams, or security programs and influencing senior engineering stakeholders
- Strong communication skills and the ability to clearly communicate security risks, tradeoffs, and technical direction
**Nice to have:**
- Experience securing Level 4 autonomous vehicle systems
- Familiarity with UNECE WP.29, R155, and R156 cybersecurity and software-update requirements
- Red-team, penetration-testing, or offensive-security experience focused on vehicles, embedded systems, or hardware
- Experience with hardware security, component integrity, or automotive supply-chain security
- Prior people-management experience or experience leading a dedicated security engineering team
