Embedded Product Security Engineer, Energy Products

About the role

Embedded Product Security Engineer, Energy Products | Tesla (Energy Engineering)

Location: Palo Alto, California | Req ID: 286102 | Job Type: Full-time

What to Expect

Tesla Energy is looking for a Senior Software Security Engineer to design, build, and ship the security systems in our next generations of batteries, charging, and solar products — Powerwall, Megapack, Wall Connector, Superchargers, and the fleet services that connect them.

This is a hands-on, highly cross-functional role spanning the entire chain of trust: from silicon roots of trust, secure boot, and trusted execution, through the embedded Linux kernel and application sandbox, to the cloud PKI that issues every device its identity.

This is not a silicon-only or component-level role: you will own product security top down, from the device to the cloud and anywhere else the product's security depends on, including factory, fleet services, and the interfaces between them. You will define security requirements, architect systems that meet them efficiently, write and ship the production code yourself, and own how secure our products are in the field.

In short, you will build the embedded software that keeps millions of connected energy devices secure, while enabling customer-facing connected services and sophisticated remote diagnostics.

What You'll Do

• Own product security end to end — device, factory, fleet, and cloud — not just a single layer
• Design and implement security features across embedded firmware and Linux: secure boot, lifecycle lock-down, hardware-backed keys and attestation, storage encryption, and secure OTA with anti-rollback
• Integrate secure elements, TPMs, and TrustZone/TEE through bootloader, TEE, and kernel driver development
• Harden the platform with mandatory access control, sandboxing, kernel and compiler hardening, and least-privilege service design
• Build device identity and certificate infrastructure, from on-device key generation through factory provisioning to fleet-side issuance, partnering with Manufacturing and Fleet Infrastructure
• Define security requirements, threat models, and design documents with the Product, Product Security, and Connected Services teams
• Own the security health of shipped products: CVE remediation, pentest findings, supply-chain security, runtime telemetry, and root-causing fleet incidents
• Validate security controls on real hardware and across the fleet, build reusable tooling that raises the bar for other teams, and mentor engineers

What You'll Bring

• Experience in embedded development in robotics, real-time controls, or system software, including shipping security for internet-connected devices at scale
• Hands-on depth in at least one of: hardware-backed security, system-level (kernel/bootloader/TEE) development, or embedded Linux hardening
• Strong proficiency in C and at least one of Rust or Go
• Sound knowledge of cryptography and public key infrastructure, including X.509 certificate chains, mutual TLS, and hardware key attestation
• Clear technical writing and strong communication, with the ability to drive alignment across hardware, firmware, manufacturing, and cloud teams
• Ability to multi-task, prioritize, and work in an extremely fast-paced, collaborative environment
• Preferred: Hardware security on ARM SoCs: secure elements (e.g., NXP SE05x), TrustZone/TEE, OP-TEE, Trusted Firmware-A, or U-Boot
• Preferred: Embedded Linux hardening: AppArmor or SELinux, sandboxing, Buildroot or Yocto, and Clang/LLVM hardening (CFI, sanitizers)
• Preferred: Certificate issuance and HSM-backed signing services, eBPF runtime security monitoring, or SBOM/vulnerability management
• Preferred: Threat modeling to IEC 62443-4-1; EV charging or grid protocol security (ISO 15118, IEEE 2030.5)

Benefits

Along with competitive pay, as a full-time Tesla employee, you are eligible for the following benefits at day 1 of hire:

• Medical plans > plan options with $0 payroll deduction
• Family-building, fertility, adoption and surrogacy benefits
• Dental (including orthodontic coverage) and vision plans, both have options with a $0 paycheck contribution
• Company Paid (Health Savings Accounts) HSA Contribution when enrolled in the High-Deductible medical plan with HSA
• Healthcare and Dependent Care Flexible Spending Accounts (FSA)
• 401(k) with employer match, Employee Stock Purchase Plans, and other financial benefits
• Company paid Basic Life, AD&D
• Short-term and long-term disability insurance (90 day waiting period)
• Employee Assistance Program
• Sick and Vacation time (Flex time for salary positions, Accrued hours for Hourly positions), and Paid Holidays
• Back-up childcare and parenting support resources
• Voluntary benefits to include: critical illness, hospital indemnity, accident insurance, theft & legal services, and pet insurance
• Weight Loss and Tobacco Cessation Programs
• Tesla Babies program
• Commuter benefits
• Employee discounts and perks program
• Earned Wage Access: Real-time pay access paid daily, subject to eligibility and schedule (applicable for below Sr. Managers levels)

Expected Compensation$136,000 - $330,000/annual salary + cash and stock awards + benefitsPay offered may vary depending on multiple individualized factors, including market location, job-related knowledge, skills, and experience. The total compensation package for this position may also include other elements dependent on the position offered. Details of participation in these benefit plans will be provided if an employee receives an offer of employment.