Senior Security Engineer, Vehicle Systems

About Spin Spin is a fast-growing micromobility company committed to a world with clean air, liveable cities, safe streets, and widespread access to convenient, affordable transportation. If you’re searching for a top-tier career where you can make a difference and dynamically collaborate within a creative, lively environment—Spin welcomes you!

We’re passionate about transportation and technology. The work we accomplish fulfills a sense of meaning and purpose, which goes beyond the traditional dimensions of a workplace. Our products and initiatives directly influence people’s lives, which is proven by our customers' feedback.

Founded in 2017, and now a subsidiary of Ford Motor Company, we have worked together with cities, campuses, community groups, and businesses to expand internationally. Even as we expand, we maintain the close feeling of a small business, with “fireside chats” chats led by our company’s founders, weekly OKR pop-up videos, music-infused presentations at our All Hands meetings, and more. During this time of working remotely, our creativity and shared goals have kept us united and bonded within our virtual community.

We are a diverse team of artists, engineers, designers, urban planners, policymakers, marketers, and operators. We believe in inclusivity and build powerful alliances to fulfill our goals and move our mission forward. Above all, we at Spin are connected by our values and #BeOrange spirit, which represents unity, purpose, passion, and creativity.

About the Role

Security is critical to the development and testing of Spin's micro-mobility solutions. In this Vehicle Systems Security role, you will ensure the highest level of security for Spin's vehicles and IoT platforms, engaging with all stages of the development lifecycle, from threat analysis to penetration testing. Your goal will be to identify security issues in product designs and/or implementations related to Spin's vehicles and connected ecosystem.

Responsibilities

• Guide Spin's short and long-term approaches to vehicle and IoT security.
• Collaborate with hardware and firmware product teams on secure design and development.
• Develop security related tooling.
• Perform threat assessments and design reviews.
• Research new attack vectors against Spin products and services.
• Contribute to hardware/firmware design.
• Generate security requirements for Spin engineering and suppliers.

Qualifications

• Minimum of 12 years of experience in security engineering plus a bachelor's degree, or 10 years experience plus a master’s degree.
• Strong cross-functional communication skills.
• Controller Area Network (CAN bus) systems.
• Embedded real-time systems (e.g., FreeRTOS).
• Wireless security, including Bluetooth, WiFi, 2G/3G/LTE/5G.
• IoT security at the device, edge, and infrastructure.
• Working knowledge of cryptography, secure communications, and PKI.
• Deep understanding of security paradigms (secure boot, chain-of-trust, etc) and related security threats, exploits and prevention.
• Digital Signatures that support various content encodings (ie. JWS, XML-DSIG, PKCS#7).
• Network Security Topologies and approaches (CANcrypt, MAC-sec, IP-Sec, Overlay like Tinc).
• Maintaining onboard secrets per device using KeyStores, FS Cryptography, Device Encryption.
• Practical knowledge of applied cryptography and common attacks against modern cryptographic algorithms (encryption at rest, TLS, hashing, etc).
• Ability to prioritize, reproduce, recommend remediations and implement fixes for vulnerabilities.
• Passion for understanding and researching vulnerabilities and exploitation techniques.
• Keeps up with industry trends in security technology and threats.

Benefits & Perks

• Opportunity to join a fast-growing startup and help shape and establish the company’s industry leadership
• Competitive health benefits
• Unlimited PTO for salaried roles
• Pre-tax commuter benefits
• Monthly cell phone bill stipend
• Wellness perk for salaried roles

Spin is an equal opportunity employer and will not discriminate against any employee or applicant for employment in an unlawful matter. We celebrate diversity and are committed to creating an inclusive environment for all individuals. Spin treats all employees and job applicants on the basis of merit, qualifications, and competence without regard to any qualified individuals' sex, race, color, religion, national origin, ancestry, gender (including pregnancy, breastfeeding, or related medical condition), sexual orientation, gender identity, gender expression, age, physical or mental disability, medical condition, genetic characteristic or information, marital status, military and veteran status, or any other characteristic protected by state or federal law. Spin also considers qualified applicants with criminal histories, consistent with applicable local, state, and federal law. Spin is committed to providing reasonable accommodations for qualified individuals with disabilities in its job application procedures. If you need assistance or an accommodation due to a disability, you may contact us at job_accommodations@spin.pm.