Senior Staff Security Product Architect

Senior Staff Security Product Architect

Aurora's mission is to deliver the benefits of self-driving technology safely, quickly, and broadly. The Aurora Driver will create a new era in mobility and logistics, one that will bring a safer, more efficient, and more accessible future to everyone. At Aurora, you will tackle massively complex problems alongside other passionate, intelligent individuals, growing as an expert while expanding your knowledge.

The mission of Aurora's One Tech Security Architect team is to embed security into every aspect of Aurora's products; spanning software, hardware, and services. As a Senior Staff Security Product Architect, you will serve as a primary technical authority driving the end-to-end security architecture across Aurora's autonomous vehicle platform, hardware system controls, embedded systems, and connected cloud services. You will act as a technical liaison between Security, System Engineering, and Product teams across the organization, moving seamlessly between high-level architectural strategy and detailed technical execution to ensure robust, defense-in-depth security is successfully integrated into products developed across the company.

Your deep technical expertise, architectural vision, and ability to lead system security design will be essential in safeguarding Aurora's products and ensuring they meet the highest cybersecurity standards.

The job level is negotiable based on experience. Flexible work locations are available (MTV preferred, SFO, PIT, SEA, BJC. DET, BZN) for US-based employees (Full remote is not available for this role).

In this role, you will:

• Define End-to-End Security Onboard and Offboard Architecture:
  Design and specify end to end system-level security architectures and trust boundaries across vehicle hardware, onboard systems and software, safety critical ECUs and connected offboard platforms, services, infrastructure and applications. Establish secure boot flows, cryptographic key management, and hardware security module (HSM/TPM) integrations and secure protocols to protect data at rest, in transit and between cloud to vehicle interactions.
• Lead Threat Modeling & Design Reviews:
  Direct threat modeling (e.g., TARA, STRIDE) and vulnerability analysis for complex autonomous cloud and compute systems, sensor suites, networks, and cloud infrastructure.
• Collaborate with Engineering & Product Teams:
  Work closely with Product Management, Software and Hardware Development, and Core Security teams to support security requirements and goal development while also translating them into implementable engineering designs, assess product risk, and protect product integrity.
• Engage with Suppliers and Tier 1 Partners:
  Drive architectural security requirements with hardware/software suppliers and Tier 1 development partners, ensuring third-party components and IP meet Aurora's cybersecurity standards.
• Build Technical Security Roadmaps:
  Partner with program management, technical leads, and engineers to develop roadmaps for key security investments helping resolve cross-functional technical dependencies, and meet standard design patterns within Aurora.
• Embed Security Assurance & Controls:
  Develop and enforce architectural security assurance, governance, and risk mitigation strategies into all phases of hardware and software product lifecycle.

Required Qualifications:

• 15+ years of experience in security architecture, system security engineering, or product security roles within automotive, autonomous vehicles, embedded systems, or complex hardware/software systems.
• Bachelor's or Master's degree in Computer Science, Computer Engineering, Electrical Engineering, Cybersecurity, or a related STEM field.
• Deep technical domain expertise in embedded security principles, hardware security anchors (e.g., Secure Boot, ARM Trust Zone, HSMs, TPMs), applied cryptography, and secure protocol design (e.g., SecOC, CAN/Ethernet security, TLS).
• Proven experience performing architectural security assessments, system-level threat modeling, and secure design reviews for hardware and software platforms.
• Strong communication and technical leadership skills, with a demonstrated ability to influence cross-functional engineering teams and drive architectural decisions.

Desirable

Qualifications:

• Experience with and knowledge of automotive and cloud security standards and regulations, such as ISO/SAE 21434, ASPICE, ISO 27001 or UNECE R155/R156.
• Strong foundation of experience to successfully engage, communicate and influence OEMs, Tier-1s, Suppliers, or commercial partners in order to further Aurora's security posture.
• Practical experience designing secure systems between autonomous vehicle stacks, safety-critical ECUs, off-board telemetry/cloud infrastructures, cloud/cloud applications.
• Experience building and scaling security architecture frameworks from the ground up in safety-critical or heavily regulated industries.
• Advanced security architecture or engineering certifications such as CISSP-ISSAP, CISM, or…