Senior Software Engineer, Security Engineering
Bot Auto
Salary undisclosed
Need a reasonable accommodation to apply or interview? Contact us.
JobMinglr uses automated technology to recommend jobs based on profile information and job preferences. Match Score does not determine eligibility for a position, prevent a user from viewing or applying to a job, or make hiring decisions on behalf of an employer.
Description
Company Introduction
At Bot Auto, we are revolutionizing the transportation of goods with our cutting-edge autonomous trucks, enhancing the quality of life for communities around the globe. With the agility of a start-up and the wisdom of seasoned experts, Bot Auto boasts a team that has achieved numerous world-firsts and unparalleled innovations. United by a shared vision, we create miracles and propel the future of transportation. Join us and transform your dreams into reality.
We are seeking a highly skilled and motivated Senior Software Engineer, Security Engineering to design, build, and operate security across Bot Auto's autonomous trucking stack. The proprietary technology that powers our autonomous driving system is our core intellectual property, and protecting it — along with the safety-relevant systems behind our fleet — is mission critical. In this role, you will work across onboard (in-vehicle) security as well as infrastructure and platform security. You will also help shape how Bot Auto adopts AI responsibly: understanding the security implications of large language models and agentic systems, and developing the protections that let us innovate quickly and safely. As a hands-on technical leader, you will embed security best practices into every layer of our systems, from the vehicle to the cloud.
Key Responsibilities
- Design and implement security controls for onboard (in-vehicle) systems, including secure boot, code signing, secrets and key management, secure over-the-air (OTA) updates, and hardening of the autonomous driving software stack.
- Architect and operate security across infrastructure and platforms, spanning Kubernetes, public cloud (AWS), on-prem data centers, CI/CD pipelines, and internal developer platforms.
- Develop protections for AI systems — assess the security implications of large language models and agentic workflows (prompt injection, data exfiltration, model and supply-chain risks) and build guardrails, sandboxing, and monitoring.
- Build identity and access management, secrets management, and least-privilege authorization across services, devices, and the fleet.
- Perform threat modeling, security design reviews, and risk assessments for new products and architectures, partnering with engineering teams to remediate findings.
- Establish vulnerability management, dependency and supply-chain scanning, and a secure software development lifecycle (SSDLC) across the organization.
- Develop detection, logging, and incident response capabilities to identify and respond to security events across onboard and infrastructure environments.
- Champion a security-first culture through tooling, automation, documentation, and mentorship.
Required Qualifications
- Bachelor's degree in Computer Science, Engineering, or a related field, or equivalent experience
- 5+ years of hands-on software engineering experience, with a strong focus on security
- Strong software development skills in one or more languages: Python, Go, Rust, C/C++, or JavaScript/TypeScript
- Solid understanding of applied cryptography, authentication and authorization, secure system design, and common vulnerability classes
- Experience securing cloud infrastructure and/or distributed systems in production
Preferred Qualifications
- Experience with embedded, automotive, IoT, or other onboard/edge security (secure boot, TPM/HSM, code signing, OTA updates)
- Familiarity with Kubernetes and cloud security (AWS), IaC security (Terraform, Pulumi), and CI/CD pipeline hardening
- Knowledge of AI/LLM security: prompt injection, model supply chain, agent sandboxing, and AI guardrail frameworks
- Experience with IAM, secrets management (e.g., HashiCorp Vault), and zero-trust architectures
- Hands-on experience with security tooling: SAST/DAST, SBOM and dependency scanning, SIEM, and detection engineering
- Familiarity with security standards and frameworks (e.g., ISO/SAE 21434, NIST, OWASP, SOC 2)
- Experience with threat modeling and incident response
About this role
Bot Auto is building autonomous trucking technology, and this role sits at the intersection of protecting that intellectual property and ensuring the safety-critical systems powering the fleet stay secure. You'd be designing and implementing security across the entire stack—from the vehicles themselves (secure boot, code signing, OTA updates) through cloud infrastructure and internal platforms. This is hands-on technical work, not policy or compliance theater; you'll be writing code, architecting systems, and embedding security controls where they matter most.
The role spans three interconnected domains. Vehicle security involves hardening the autonomous driving software and managing secrets and keys at the edge. Infrastructure security covers Kubernetes, AWS, CI/CD pipelines, and internal developer platforms. And increasingly, you'll be thinking through the security implications of AI systems—LLMs and agentic workflows—and building the guardrails to let the company innovate without exposing itself to prompt injection, data exfiltration, or supply-chain risks. You'll also lead threat modeling, vulnerability management, and incident response, and help establish a security-first culture through tooling and mentorship.
This requires five-plus years of hands-on software engineering with a security focus, fluency in at least one of Python, Go, Rust, C/C++, or TypeScript, and solid grounding in cryptography, authentication, and system design. Experience with embedded or automotive security, Kubernetes, AWS, and AI security is valuable. The role is full-time and in-office in Houston.
This role's local market on JobMinglr
Pay for this role
The employer didn't post a pay range for this role. That usually means pay is set in negotiation, which favors whoever arrives with numbers. Check ranges on comparable Senior Software Engineer, Security Engineering postings in Houston, and analyze any offer before you accept it.
Before you apply, worth reading
How JobMinglr reads this job
Every listing here is scored against your profile before you apply: skills overlap, experience level, location and work arrangement, each weighted and explained. You see the score and the reasons, not just a list. How the matching works.