Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 41 hours ago

Staff Software Engineer - Vehicle & Hardware Security

Pronto32 open roles

Where
San Francisco, CA
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowStaff Software Engineer - Vehicle & Hardware SecurityPronto · San Francisco, CA

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Pronto's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

11.8% of postings close within 7 days. Measured by our own scanner across the market. Pronto postings stay open a median of 8 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.4%3 days
  3. 11.8%7 days
  4. 18.6%14 days
  5. 35.6%30 days
  6. 45.1%60 days
This job: posted 41 hours ago

Pronto median: 8 days open

The posting

Who we are

Pronto AI is a global leader in commercializing autonomous vehicle (AV) technology, deploying Autonomous Haulage Systems (AHS) that automate operations in mines, quarries, and construction sites worldwide. While much of the industry remains in R&D, we deliver real, production-ready autonomy that is already operating in the field.

We are on a mission to make mining operations safer, smarter, and more efficient through cutting-edge technology, and we are building toward becoming the world’s first profitable AV technology company.

What you’ll do

As a Staff Software Engineer focused on Vehicle & Hardware Security, you’ll own the security of the systems that make our vehicles operate safely, from in-vehicle networks and ECU firmware to secure boot and over-the-air updates. You’ll serve as the senior security partner to our vehicle engineering teams while helping set the technical direction and operating cadence for the broader security team.

  • Threat model and secure automotive Ethernet, CAN, and CAN-FD networks against message injection, spoofing, replay, and other vehicle-network attacks.
  • Design and review ECU security controls including secure boot, firmware code signing, and anti-rollback protections across vehicle compute systems.
  • Secure the OTA update pipeline, including update signing, staged and canary rollouts, rollback protection, and tamper detection.
  • Partner with hardware and manufacturing teams to identify and mitigate supply-chain risks, including counterfeit or tampered vehicle components.
  • Represent Security in vehicle architecture and engineering design reviews, identifying security requirements early in the development lifecycle.
  • Own incident-response strategies for compromised or potentially compromised vehicles, including safe remote isolation and quarantine procedures.
  • Provide technical leadership across the security organization, helping establish priorities, engineering standards, and team operating practices.
  • As the team grows, help lead a broader security team through technical direction, hiring, mentorship, and quarterly planning.

What we’re looking for

We’re looking for a deeply technical security engineer who understands both how modern vehicles are built and how they can be attacked. You should be comfortable moving between embedded software, vehicle networks, firmware, hardware, and security architecture while serving as a trusted technical partner to vehicle engineering leadership.

Basic qualifications

  • 7+ years of experience in security engineering, including at least 3 years working in automotive, embedded systems, or industrial IoT security.
  • Hands-on experience with automotive communication protocols including CAN/CAN-FD and UDS.
  • Experience with automotive security testing tools such as SocketCAN, CANoe, Kayak, or equivalent tooling.
  • Production experience securing OTA firmware or software update systems.
  • Experience with secure boot, code signing, firmware integrity, and rollback protection.
  • Working knowledge of ISO/SAE 21434 and how automotive cybersecurity requirements integrate into the software and hardware development lifecycle.
  • Experience leading technical projects, teams, or security programs and influencing senior engineering stakeholders.
  • Strong communication skills and the ability to clearly communicate security risks, tradeoffs, and technical direction.

Nice to have

  • Experience securing Level 4 autonomous vehicle systems.
  • Familiarity with UNECE WP.29, R155, and R156 cybersecurity and software-update requirements.
  • Red-team, penetration-testing, or offensive-security experience focused on vehicles, embedded systems, or hardware.
  • Experience with hardware security, component integrity, or automotive supply-chain security.
  • Prior people-management experience or experience leading a dedicated security engineering team.

Why join us

  • Work on real, production-deployed autonomy.
  • Build technology that directly improves safety, efficiency, and productivity.
  • Tackle complex challenges in demanding, real-world environments.
  • Be part of a fast-moving team with high ownership and impact.
  • See your work deployed and making a difference in the field.
  • Collaborate closely with experienced engineers and industry operators.

What else you need to know

This role is based in our San Francisco office. Atoms is a company driven by invention and continuous change - we are constantly reimagining our industries, building new products, and refining how we operate. We do our best work together. That’s why all of our office-based teams work onsite, five days a week.

The base salary range for this role is $224,000 - $284,000 per year.

Actual compensation will be determined on an individual basis and may vary depending on experience, skills, and qualifications.

Base salary is just one part of your total rewards package. You may also be eligible for equity awards.

Benefits Summary (USA Full-Time Exempt Employees):

  • Medical, Dental, Vision, Disability, and Life Insurance
  • Flexible Spending Account / Health Savings Account Options
  • 401(k)
  • Equity
  • Sick Time, Unlimited Flexible Time Off, and Paid Holidays
  • Paid Parental Leave
  • Pre-Tax Commuter Benefit Plan
  • Team lunch in our SoMa office every Tuesday and Thursday

Benefits are subject to change at the company's discretion. Pronto accepts applications on an ongoing basis.

Ready to join us as we serve those who serve others?

#LI-Onsite

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Pronto's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Pronto's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Pronto's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.