Senior Security Engineer - AD/ADAS Systems

Woven by Toyota is enabling Toyota’s once-in-a-century transformation into a mobility company. Inspired by a legacy of innovating for the benefit of others, our mission is to challenge the current state of mobility through human-centric innovation — expanding what “mobility” means and how it serves society.
Our work centers on four pillars: AD/ADAS, our autonomous driving and advanced driver assist technologies; Arene, our software development platform for software-defined vehicles; Woven City, a test course for mobility; and Cloud & AI, the digital infrastructure powering our collaborative foundation. Business-critical functions empower these teams to execute, and together, we’re working toward one bold goal: a world with zero accidents and enhanced well-being for all.
TEAMProduct IntegrityWe are the first line of defense for safety + security + quality of AD/ADAS software at Woven by Toyota. Partnering with feature, systems, safety, cybersecurity, and machine learning teams, we turn prototypes into production-intent, standards-compliant software that can be trusted on public roads. Our mandate flows directly from Woven’s commitment to “zero accidents and enhanced well-being for all.”

WHO WE ARE LOOKING FORA senior security engineer who makes “secure by design” the default. This is a senior individual contributor role with wide cross-functional visibility. Your work directly impacts the safety and trustworthiness of Woven’s autonomous technology on public roads. You combine deep ISO/SAE 21434 know-how with pragmatic threat-modeling skills, embedding controls early and guiding teams to create strong cybersecurity cases, while keeping velocity high. You are an active enabler, whose primary mission is to empower teams to build resilient, production-ready software that protects our customers and our systems.

RESPONSIBILITIES

• Own the cybersecurity framework for AD/ADAS software, from requirements to tests and incident-response deliverables.
• Drive threat analysis & risk assessments (TARA) and translate them into secure coding guidelines, checklists, and automated CI/CD gates.
• Generate and maintain cybersecurity plans, work products, and case artifacts required for production readiness.
• Serve as incident “first responder” and coordinate remediation across hardware, firmware, cloud, and software teams.

MINIMUM QUALIFICATIONS

• Bachelor’s or Master’s in CS, EE, CE or related discipline. 
• 5+ years in embedded or automotive product security in a production environment.
• Hands-on implementation of ISO/SAE 21434 or UNECE R155 cybersecurity management systems.
• Proven track record building threat models, secure code reviews, and penetration testing pipelines.
• Proficiency with C/C++, Python, and common vulnerability scanning & fuzzing tools (e.g., AFL++, QEMU, CodeQL).
• Ability to balance risk, compliance, and delivery speed in a fast-moving org.

NICE TO HAVES

• GIAC (GPEN/GWEB) or CISSP, CEH certifications.
• Experience securing ML pipelines or autonomous-driving perception stacks.
• Knowledge of cloud security (AWS IoT, Kubernetes) and over-the-air update infrastructures.
• Participation in ISO 21434 standardization or open-source security communities.

For positions based in Palo Alto, CA, the base pay for this position ranges from $140,000- $230,000 a year
Your base salary is one part of your total compensation. We offer a base salary, short term and long term incentives, and a comprehensive benefits package. The total compensation offered to an employee will be dependent upon the individual's skills, experience, qualifications, location, and level.
WHAT WE OFFERWe are committed to creating a modern work environment that supports our employees and their loved ones. We offer many options of the best programs to allow you to do your most meaningful work and to help you shape the future of mobility.・Excellent health, wellness, dental and vision coverage・A rewarding 401k program・Flexible vacation policy・Family planning and care benefits
Our Commitment・We are an equal opportunity employer and value diversity.・Any information we receive from you will be used only in the hiring and onboarding process. Please see our privacy notice for more details.