Staff Software Engineer - Vehicle & Hardware Security
Atoms · San Francisco, CA
- Location
- San Francisco, CA
- Level
- Staff
- Posted
- 21 October
About this role
Who we are
Pronto AI is a global leader in commercializing autonomous vehicle (AV) technology, deploying Autonomous Haulage Systems (AHS) that automate operations in mines, quarries, and construction sites worldwide. While much of the industry remains in R&D, we deliver real, production-ready autonomy that is already operating in the field.
We are on a mission to make mining operations safer, smarter, and more efficient through cutting-edge technology, and we are building toward becoming the world’s first profitable AV technology company.
What you’ll do
As a Staff Software Engineer focused on Vehicle & Hardware Security, you’ll own the security of the systems that make our vehicles operate safely, from in-vehicle networks and ECU firmware to secure boot and over-the-air updates. You’ll serve as the senior security partner to our vehicle engineering teams while helping set the technical direction and operating cadence for the broader security team.
- Threat model and secure automotive Ethernet, CAN, and CAN-FD networks against message injection, spoofing, replay, and other vehicle-network attacks.
- Design and review ECU security controls including secure boot, firmware code signing, and anti-rollback protections across vehicle compute systems.
- Secure the OTA update pipeline, including update signing, staged and canary rollouts, rollback protection, and tamper detection.
- Partner with hardware and manufacturing teams to identify and mitigate supply-chain risks, including counterfeit or tampered vehicle components.
- Represent Security in vehicle architecture and engineering design reviews, identifying security requirements early in the development lifecycle.
- Own incident-response strategies for compromised or potentially compromised vehicles, including safe remote isolation and quarantine procedures.
- Provide technical leadership across the security organization, helping establish priorities, engineering standards, and team operating practices.
- As the team grows, help lead a broader security team through technical direction, hiring, mentorship, and quarterly planning.
What we’re looking for
We’re looking for a deeply technical security engineer who understands both how modern vehicles are built and how they can be attacked. You should be comfortable moving between embedded software, vehicle networks, firmware, hardware, and security architecture while serving as a trusted technical partner to vehicle engineering leadership.
Basic qualifications
- 7+ years of experience in security engineering, including at least 3 years working in automotive, embedded systems, or industrial IoT security.
- Hands-on experience with automotive communication protocols including CAN/CAN-FD and UDS.
- Experience with automotive security testing tools such as SocketCAN, CANoe, Kayak, or equivalent tooling.
- Production experience securing OTA firmware or software update systems.
- Experience with secure boot, code signing, firmware integrity, and rollback protection.
- Working knowledge of ISO/SAE 21434 and how automotive cybersecurity requirements integrate into the software and hardware development lifecycle.
- Experience leading technical projects, teams, or security programs and influencing senior engineering stakeholders.
- Strong communication skills and the ability to clearly communicate security risks, tradeoffs, and technical direction.
Nice to have
- Experience securing Level 4 autonomous vehicle systems.
- Familiarity with UNECE WP.29, R155, and R156 cybersecurity and software-update requirements.
- Red-team, penetration-testing, or offensive-security experience focused on vehicles, embedded systems, or hardware.
- Experience with hardware security, component integrity, or automotive supply-chain security.
- Prior people-management experience or experience leading a dedicated security engineering team.
Why join us
- Work on real, production-deployed autonomy.
- Build technology that directly improves safety, efficiency, and productivity.
- Tackle complex challenges in demanding, real-world environments.
- Be part of a fast-moving team with high ownership and impact.
- See your work deployed and making a difference in the field.
- Collaborate closely with experienced engineers and industry operators.
What else you need to know
This role is based in our San Francisco office. Atoms is a company driven by invention and continuous change - we are constantly reimagining our industries, building new products, and refining how we operate. We do our best work together. That’s why all of our office-based teams work onsite, five days a week.
The base salary range for this role is $224,000 - $284,000 per year.
Actual compensation will be determined on an individual basis and may vary depending on experience, skills, and qualifications.
Base salary is just one part of your total rewards package. You may also be eligible for equity awards.
Benefits Summary (USA Full-Time Exempt Employees):
- Medical, Dental, Vision, Disability, and Life Insurance
- Flexible Spending Account / Health Savings Account Options
- 401(k)
- Equity
- Sick Time, Unlimited Flexible Time Off, and Paid Holidays
- Paid Parental Leave
- Pre-Tax Commuter Benefit Plan
- Team lunch in our SoMa office every Tuesday and Thursday
Benefits are subject to change at the company's discretion.
Pronto accepts applications on an ongoing basis.
Ready to join us as we serve those who serve others?
#LI-Onsite
As published by Atoms. Applications are handled on their site.
Skills this posting mentions
About Atoms
Atoms builds physical automation to transform industry and move the world. Everything in our civilization is mined, grown, manufactured, and moved. Atoms develops the robotics, software, and infrastructure that automate these physical systems. Atoms Food: Infrastructure for better food. Atoms Mining: More productive mines to power Earth’s industries. Atoms Transport: Wheelbase for robots. Together, these systems form a new class of computation for the real world - machines that sense, predict, and act in physical environments to make industry more productive, reliable, and scalable. Atoms build the progress machines that power the next era of human advancement.
All 335 openings at AtomsOne click, then it is written
Apply to Atoms with a resume written for this role.
Queue Staff Software Engineer - Vehicle & Hardware Security and I read the posting, rewrite your resume against it, draft the cover letter, and score the fit. Then you press send, or press one button and I fill in Atoms’s form for you.
01Drop your resume
A PDF or a LinkedIn URL. About a minute, once.
02I rank the openings
Every weekday morning, the live catalog scored against your history. Up to 20 worth your time, not two hundred links.
03Each one is written up
Resume rewritten for the posting, a cover letter, a fit score. Press send, or let me fill in the form.
- 25 sent a week, free
- No card
- Nothing sent until you say so
More roles at Atoms
See all- 21 October
Senior Software Engineer - Cloud & Platform Security
San Francisco, CA
$167k - $230k/yrSeniorEngineering - 21 October
- 21 October
- 21 October
Senior Software Engineer - Infrastructure Security Platform
Seattle, WA
$167k - $230k/yrSeniorEngineering - 21 October
- 20 October
Similar roles elsewhere
See more- 22 October
- 22 October
Product Platform: Product Engineer
BasetenSan Francisco, CaliforniaHybrid
$165k - $330k/yrMid levelEngineering - 22 October
Technical Program Manager, Forward Deployed Engineering
BasetenSan Francisco, CaliforniaHybrid
$165k - $330k/yrMid levelEngineering - 22 October
Software Engineer, Admin Experience
SierraSan Francisco, CA
$230k - $390k/yr2 locationsMid levelEngineering - 22 October
Software Engineer, Agent Builder
SierraSan Francisco, CA
$230k - $390k/yr2 locationsMid levelEngineering
Put this to work
Paste your career in once. Every application after that is written for you.
Drop a resume or a LinkedIn URL. I rank the live openings against it, rewrite the resume and write a cover letter for the best of them, and fill in the employer's form when you press the button. You read, you decide what goes out.
01Drop your resume
A PDF or a LinkedIn URL. About a minute, once.
02I rank the openings
Every weekday morning, the live catalog scored against your history. Up to 20 worth your time, not two hundred links.
03Each one is written up
Resume rewritten for the posting, a cover letter, a fit score. Press send, or let me fill in the form.
- New matches ranked and written before you are up.
- Every bullet stays inside what your history supports. Nothing invented.
- Queued, submitted, interviewing, offer: one screen, not a spreadsheet.
500 free credits on sign-up. No card. Nothing is sent until you say so.
Listed from the job board Atoms publishes. Refolk is not the employer and does not handle their hiring. Applications go to Atoms directly.