Senior Staff Security Product Architect

About the role

The OneTech Security Architect team at Aurora is dedicated to embedding security into every aspect of our products, which span software, hardware, and services. This role requires a Senior Staff Security Product Architect who will define end-to-end security architectures, lead threat modeling and design reviews, collaborate with engineering and product teams, engage with suppliers and tier 1 partners, build technical security roadmaps, and ensure security assurance and controls are embedded throughout the product lifecycle.

Responsibilities

• Define End-to-End Security Onboard and Offboard Architecture
• Establish secure boot flows, cryptographic key management, and hardware security module (HSM/TPM) integrations and secure protocols to protect data at rest, in transit, and between cloud to vehicle interactions.
• Lead Threat Modeling & Design Reviews
• Collaborate with Engineering & Product Teams
• Work closely with Product Management, Software and Hardware Development, and Core Security teams to support security requirements and goal development while also translating them into implementable engineering designs, assess product risk, and protect product integrity.
• Engage with Suppliers and Tier 1 Partners
• Drive architectural security requirements with hardware/software suppliers and Tier 1 development partners, ensuring third-party components and IP meet Aurora’s cybersecurity standards.
• Build Technical Security Roadmaps
• Partner with program management, technical leads, and engineers to develop roadmaps for key security investments helping resolve cross-functional technical dependencies, and meet standard design patterns within Aurora.
• Embed Security Assurance & Controls
• Develop and enforce architectural security assurance, governance, and risk mitigation strategies into all phases of hardware and software product lifecycle.

Requirements

• 15+ years of experience in security architecture, system security engineering, or product security roles within automotive, autonomous vehicles, embedded systems, or complex hardware/software systems.
• Bachelor’s or Master’s degree in Computer Science, Computer Engineering, Electrical Engineering, Cybersecurity, or a related STEM field.
• Deep technical domain expertise in embedded security principles, hardware security anchors (e.g., Secure Boot, ARM TrustZone, HSMs, TPMs), applied cryptography, and secure protocol design (e.g., SecOC, CAN/Ethernet security, TLS).
• Proven experience performing architectural security assessments, system-level threat modeling, and secure design reviews for hardware and software platforms.
• Strong communication and technical leadership skills, with a demonstrated ability to influence cross-functional engineering teams and drive architectural decisions.

Desirable Qualifications

• Experience with and knowledge of automotive and cloud security standards and regulations, such as ISO/SAE 21434, ASPICE, ISO 27001 or UNECE R155/R156.
• Practical experience designing secure systems between autonomous vehicle stacks, safety-critical ECUs, off-board telemetry/cloud infrastructures, cloud/cloud applications.
• Advanced security architecture or engineering certifications such as CISSP-ISSAP, CISM, or equivalent.