Product Security Engineer

What to Expect

We are looking for a highly motivated Engineer specializing in product security to work on Model S, X, 3, Y, Cyber Truck and future R&D projects. Other car companies have talked for years about a future of "connected cars." At Tesla, we make it happen. We regularly send over-the-air software updates to our fleet, seamlessly delivering new features and improvements to our customers. Our mobile applications allow customers to interact with their cars via real-time, low-latency two-way communication. We also build tools for our internal sales, delivery, and service teams. Today we remotely identify potential vehicle issues before a customer does—and often fix problems remotely too. To this end, information and product security is of the utmost importance.

As a Product Security Engineer for Tesla you will be expected to analyze system services, operating systems, networks and applications from a security perspective. You will be expected to be skilled at discovering security issues and recommending patches. You will participate in security audits, risk analysis, vulnerability testing and security reviews.

What You’ll Do

• Audit embedded code to identify security vulnerabilities
• Lead security initiatives and serve as a point of contact
• Conduct penetration tests and risk assessments in an automotive environment
• Work with Tesla teams and external suppliers to drive remediation. Help to design a secure connected vehicle architecture
• Work with vendors, partners, and other Tesla teams to drive remediation
• Conduct risk assessments to prioritize threats and compare mitigation strategies
• Assist design teams in developing secure automotive systems
• Help ensure Tesla's products are implemented to a high security standard
• Work with teams to implement, identify and advance security at Tesla

What You’ll Bring

• Strong investigative and analytical problem-solving skills
• Experience with secure architecture design
• Strong communication skills, both written and spoken
• Security expertise in one or more of: C, C++, x86, ARM, CAN, cryptography, exploit development
• Penetration testing experience
• Proficient in software development, auditing code and features
• Automotive & Hardware experience a plus but not required