Senior Security Engineer - Vehicle Software

Job Description

Come join a small team of experts building the one of the most trusted IoT platform in the world connecting Tesla backends and our customers to their cars.

We are looking for a highly motivated engineer who truly believes in security as a first principle. Companies have talked for years about a future of "connected cars." At Tesla, we’re at the forefront of innovation by providing a complete suite of rich backend services to our exponentially growing fleets. The team is operating and developing a rich eco-system in charge of any remote interaction with the vehicles (ride-hailing, remote control, remote diagnostic, over-the-air updates, vehicle telemetry for self-learning Autopilot algorithm, mobile apps APIs, etc.). Our mobile applications allow customers to interact with their cars via real-time, low-latency two-way communication. 

We are looking for a highly motivated engineer specializing in security engineering to strengthen Tesla’s information, infrastructure, and product security through hands-on enhancements in authentication, authorization, and comprehensive defensive measures. The platform you help us build, protect and inspect will scale novel functionality to millions of Tesla devices and users.

Job Responsibilities

• Enhance authentication and authorization frameworks across our two in-house platforms, supporting both external customer interactions and internal operational needs
• Strengthen security implementations for key use cases, including customer access, service operations, and ride-hailing services
• Improve applications based on insights from security assessments, architecture reviews, and threat modeling of the application stack
• Proactively analyze and refactor the existing codebase to eliminate potential exploit chains and bolster overall security posture
• Integrate advanced controls into the infrastructure platform to deepen our layered defenses
• Guide engineering teams in building secure systems, promoting the adoption of best practices and secure design patterns
• Partner with cross-functional teams to execute high-impact security initiatives
• Apply strong judgment to prioritize security enhancements that effectively address critical risks

Job Requirements

• 3+ years of experience in security engineering or backend systems with security focus
• Degree in Computer Science, Computer Engineering, Electrical Engineering, proof of exceptional skills in related fields with practical software engineering experience, or equivalent experience
• Direct technical contributions in your current role, focusing on secure code and design
• Extensive background in securing web services and distributed systems and ability to engineer solutions in the full-stack
• Expertise in modern web development frameworks, preferably Golang, with emphasis on secure coding practices
• Proven experience with web security, including authentication, authorization, and threat mitigation
• Breadth of technical experience across various infrastructure and security areas and running in large production environments
• Deep understanding of mobile & web application security threats, exploits, prevention
• Strong belief in acquiring and spreading knowledge through mentorship and acting like an owner
• Practical knowledge of applied cryptography and common attacks against modern cryptographic algorithms (encryption at rest, TLS, hashing, etc.)