Kodiak was founded in April 2018 to develop autonomous technology that carries freight forward-so people, partners, and the planet thrive. Navigating highway environments presents vastly different challenges than urban streets. Kodiak's experienced team has developed the industry's most advanced technology stack purpose-built specifically for long-haul trucks. From our sensor fusion system that maximizes the value of every sensing modality, to our unique lightweight mapping solution that allows our trucks to navigate ever-changing highway construction zones, our world-class team of industry pioneers is bringing the benefits of autonomy to the $800B a year trucking industry quickly, safely, and efficiently.
We are looking for a highly skilled Application Security Engineer to join us and solve real-world security problems designing, building and monitoring our Secure Software Development Life Cycle (SSDLC) process in the autonomous vehicle / robotics space.
In this role, you will:

• Working in partnership with our software development teams, be responsible for designing, building, maintaining and monitoring our end to end Secure Software Development Life Cycle (SSDLC) process.
• Integrate our cryptographic signing and encryption process into the software build mechanism.
• Ensure that every step of our SSDLC process follows security best practices.
• Be responsible for codifying and monitoring adherence to secure coding principles.
• Aid in testing the application against security risks/parameters before release.
• Collaborate closely with other security experts on the team.
• Collaborate with our hardware and software teams to provide secure design and implementation patterns.

Qualifications:

• At least 5 years of a strong technical security background. BS, MS or PhD with industry experience in designing and implementing SSDLCs. You are a skilled software engineer with strong problem-solving skills. You are passionate about solving real-world security problems.
• Development experience with C is preferred, given our technology stack requirements.
• Familiar with cryptographic signing and encryption principles as part of our secure build, remote update and boot processes
• A team player. You take ownership and work with the team to deliver exceptional results. You are interested in the performance of the entire system across engineering disciplines.
• Ability to build and iterate quickly. You enjoy working fast and smart, and you are comfortable in the earlier stages of developing a process from scratch.
• Hands on. You are not only passionate about security but also experienced building and maintaining similar software build systems.
• Great communicator. You have experience writing clear, concise, and detailed documentation.

Benefits:

• Competitive compensation package including equity and biannual bonuses
• Excellent Medical, Dental, and Vision plans through Kaiser Permanente, Anthem, and Guardian (including a medical plan with infertility benefits)
• Flexible PTO and generous parental leave policies
• Office perks: dog-friendly, free catered lunch, a fully stocked kitchen, and free EV charging
• Long Term Disability, Short Term Disability, Life Insurance
• Wellbeing Benefits - Headspace, One Medical, Gympass, Spring Health
• Fidelity 401(k)
• Commuter, FSA, Dependent Care FSA, HSA
• Various incentive programs (referral bonuses, patent bonuses, etc.)

The annual salary range for this full-time position is $150,000-$230,000 bonus equity benefits. Our salary ranges are determined by role, level and location. The range displayed on each job posting reflects the minimum and maximum target for new hire salaries for the position across all US locations. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. We can share more about the specific salary range for your job level during the hiring process. Please note that the compensation details listed above are base salary only and do not include bonus, equity, or benefits.
At Kodiak, we strive to build a diverse community working towards our common company goals in a safe and collaborative environment where harassment of any kind is strictly prohibited. Kodiak is committed to equal opportunity employment regardless of race, ethnicity, religion, gender identity, sexual orientation, age, disability, or veteran status, or any other basis protected by applicable law.
In alignment with its business operations, Kodiak adheres to all relevant U.S. national security statutes, regulations, and administrative prerequisites. These statutes may impose limitations on Kodiak's capacity to engage specific individuals in particular roles based on various national security-related criteria. Consequently, the eligibility for this position may hinge on Kodiak's verification of a candidate's residence, U.S. person status, and/or citizenship status. In accordance with these statutes, Kodiak may find it necessary to secure a U.S. government export license before disseminating its technologies to specific individuals. Should Kodiak determine that a candidate's residence, U.S. person status, and/or citizenship status necessitate a license, prohibit the candidate from assuming this position, or otherwise fall under national security-related restrictions, Kodiak explicitly retains the right to either assess the candidate for an alternative position unaffected by such restrictions, under terms and conditions set forth at Kodiak's sole discretion, or, as an alternative, opt not to proceed with the candidate's application.