Staff Application Security Engineer at Aurora

Job description

Who we are Aurora’s mission is to deliver the benefits of self-driving technology safely, quickly, and broadly. The Aurora Driver aurora.tech will create a new era in mobility and logistics, one that will bring a safer, more efficient, and more accessible future to everyone. At Aurora, you will tackle massively complex problems alongside other passionate, intelligent individuals, growing as an expert while expanding your knowledge. For the latest news from Aurora, visit aurora.tech aurora.tech or follow us on LinkedIn linkedin.com. What we are looking for Aurora hires talented people with diverse backgrounds who are ready to help build a transportation ecosystem that will make our roads safer, get crucial goods where they need to go, and make mobility more efficient and accessible for all. We’re looking for a Staff Application Security Engineer with a strong software engineering background to help build and maintain an AI-native application security program for our driverless truck product and supporting infrastructure. This is a builder-first role for someone who enjoys understanding complex systems and working alongside engineers to improve them. You’ll collaborate on fixes and design-level improvements, build automation, and make security a low-friction part of the software development lifecycle. You’ll use AI thoughtfully to scale your attention while applying your own engineering judgment. In this role you will - Partner with engineering teams on fixes and secure design improvements, contributing code directly. - Investigate findings and their practical impact, bringing clear evidence and possible solutions when engaging the responsible teams. - Help build and maintain the application security program and its tooling, using AI to scale investigation while validating results. - Build automation and integrate preventative controls into the software development lifecycle to reduce recurring risks and friction. Required qualifications - 8+ years of experience in security , applications security engineering, or product security roles - Substantial experience building and maintaining production software, with strong programming, debugging, and system design skills. - Ability to investigate unfamiliar codebases, understand system behavior, and reason about potential misuse. - Experience delivering technical work across teams in a large or complex engineering organization. - Demonstrated ability to threat model systems, explain technical risks, and tradeoffs clearly and collaborate with engineers on practical solutions. - Experience building developer tooling, automation, or software development lifecycle integrations. - Practical experience using AI to support technical work, with the judgment to validate its output and explain the underlying reasoning. - Experience with languages in our stack: C, C++, Go, Python, JavaScript, and web frameworks. Desirable qualifications - Hands-on experience building or maintaining both cloud and embedded systems, ideally with deep technical knowledge of each. - Experience developing software for safety-critical products or their supporting infrastructure, particularly autonomous vehicle technology. - Application or product security experience, including in-depth code audits, secure design reviews, threat modeling, or vulnerability investigation. - Experience building and maintaining production AI-assisted security tooling or automation. For roles based in San Francisco, CA, Mountain View, CA, and Seattle, WA: The salary range for this position is $189,000 - $303,000 per year. For roles based in Pittsburgh, PA, Livonia, MI, and Dallas, TX: The salary range for this position is $171,000 - $273,000 per year. Aurora’s pay ranges are determined by role, level, and location. Within the range, the successful candidate’s starting base pay will be determined based on factors including job-related skills, experience, qualifications, relevant education or training, and market conditions. These ranges may be modified in the future. The successful candidate will also be eligible for an annual bonus, equity compensation, and benefits. Working at Aurora At Aurora, we bring together extraordinarily talented and experienced people united by the strength of our values. We operate with integrity, set outrageous goals, and build a culture where we win together — all without any jerks. We believe in-person work increases collaboration, empathy, and our ability to lead effectively. As a result, Aurorans are expected to work from the office at least 3 days per week, with some roles requiring more frequent in-office presence, up to 5 days per week, based on operational needs. Our Careers page aurora.tech provides insight into what it is like to work at Aurora, and you can find all the latest updates in our Newsroom aurora.tech. Our commitment to safety At the core of everything we do is our commitment to safety. Building best-in-class self-driving technology will take time, and we believe that each employee at Aurora has a role in contributing to safety, every step of the way. Aurora expects commitment to our safety policies from every employee, and seeks candidates who take an active responsibility, can contribute to building an atmosphere of trust, and invest in the organization’s long-term success by prioritizing working safely, no matter what. Our commitment to inclusion Aurora considers candidates without regard to their race, color, religion, national origin, age, sex, gender, gender identity, gender expression, sexual orientation, marital status, pregnancy status, parent or caregiver status, ancestry, political affiliation, veteran and/or military status, physical or mental disability, or any other status protected by federal or state law. Aurora considers qualified applicants with criminal histories, consistent with applicable federal, state, and local law. We are also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, you may contact us at careersiteaccommodations@aurora.tech. For California applicants, information collected and processed as part of your application and any job applications you choose to submit is subject to Aurora’s California Employment Privacy Policy.

Requirements

Must-haves

8+ years of experience in security , applications security engineering, or product security roles
Substantial experience building and maintaining production software, with strong programming, debugging, and system design skills.
Ability to investigate unfamiliar codebases, understand system behavior, and reason about potential misuse.
Experience delivering technical work across teams in a large or complex engineering organization.
Demonstrated ability to threat model systems, explain technical risks, and tradeoffs clearly and collaborate with engineers on practical solutions.
Experience building developer tooling, automation, or software development lifecycle integrations.
Practical experience using AI to support technical work, with the judgment to validate its output and explain the underlying reasoning.
Experience with languages in our stack: C, C++, Go, Python, JavaScript, and web frameworks.
Desirable qualifications
Hands-on experience building or maintaining both cloud and embedded systems, ideally with deep technical knowledge of each.
Experience developing software for safety-critical products or their supporting infrastructure, particularly autonomous vehicle technology.
Application or product security experience, including in-depth code audits, secure design reviews, threat modeling, or vulnerability investigation.
Experience building and maintaining production AI-assisted security tooling or automation.
Working at Aurora
Our Careers page https://aurora.tech/careers provides insight into what it is like to work at Aurora, and you can find all the latest updates in our Newsroom https://aurora.tech/newsroom.
Our commitment to safety
Our commitment to inclusion
For California applicants, information collected and processed as part of your application and any job applications you choose to submit is subject to Aurora’s California Employment Privacy Policy.

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

goaipythonjavascript

Platform: ashby
Effort: quick