Staff Information Security Engineer

The Tesla Internal Audit Team's mission is to protect the company by calling attention to critical risks and driving management action to address those risks. Internal projects are driven by two guiding principles - Keep Tesla Safe and Enable Operational Excellence. The Team achieves its objective by collaborating with functional and business/product groups to identify areas of risk, making valuable recommendations on process and control improvements, cost reduction, and operational excellence.

Tesla's Internal Audit team is seeking an experienced Staff Information Security Engineer to plan, execute, lead, and report on operational, information security, and technical transformation audits. This is a high-visibility role where you will be interacting with all levels of personnel within the company. This position is responsible for leading complex activities associated with completing technical security assessments (audits), as well as performing other short-term projects to provide recommendations on standardizing controls within corporate, product, and manufacturing IT environments.

• Interact extensively with IT, InfoSec, and Engineering teams and be comfortable executing projects in areas of product security, data security, vulnerability management, end point security
• Lead in-depth cybersecurity audits, evaluating network security, firewalls, and endpoint security controls
• Evaluate emerging technology governance including artificial intelligence (AI) systems, and datasets to ensure compliance with ethical guidelines and regulatory standards
• Monitor emerging AI ethics regulations and update internal compliance strategies accordingly
• Conduct vulnerability assessments and penetration testing (controls stress test), identifying and addressing security gaps in applications, and cloud/hosted infrastructure
• Evaluate the effectiveness of incident management, business continuity and disaster recovery practices
• Collaborate with cybersecurity and engineering functions to ensure audit findings drive improvements in security posture and threat detection capabilities for Tesla products and services

• 6+ years of experience in performing technical security assessments and/or penetration testing
• Strong understanding of cybersecurity frameworks (NIST, ISO 27001, ISO 42001), compliance standards, and advanced attack vectors
• Ability to conduct and lead penetration testing audits, vulnerability and/or threat assessments, and present risks to technical and non-technical stakeholders
• Proficiency in any of the following: PowerShell Empire, SPLUNK, Metasploit Framework, Cobalt Strike, Burp Suite, Canvas, Kali
• Knowledge of exploitation concepts including phishing and social engineering tactics, buffer overflows, fuzzing, SQLi, MiTM, covert channels, secure tunneling and open-source exfiltration techniques
• Bachelor's Degree in MIS, Computer Science, or equivalent experience
• At least one professional certification is required such as CISSP, GPEN, OSCP or other applicable professional certifications

Along with competitive pay, as a full-time Tesla employee, you are eligible for the following benefits at day 1 of hire:

• Medical plans > plan options with $0 payroll deduction
• Family-building, fertility, adoption and surrogacy benefits
• Dental (including orthodontic coverage) and vision plans, both have options with a $0 paycheck contribution
• Company Paid (Health Savings Accounts) HSA Contribution when enrolled in the High-Deductible medical plan with HSA
• Healthcare and Dependent Care Flexible Spending Accounts (FSA)
• 401(k) with employer match, Employee Stock Purchase Plans, and other financial benefits
• Company paid Basic Life, AD&D
• Short-term and long-term disability insurance (90 day waiting period)
• Employee Assistance Program
• Sick and Vacation time (Flex time for salary positions, Accrued hours for Hourly positions), and Paid Holidays
• Back-up childcare and parenting support resources
• Voluntary benefits to include: critical illness, hospital indemnity, accident insurance, theft & legal services, and pet insurance
• Weight Loss and Tobacco Cessation Programs
• Tesla Babies program
• Commuter benefits
• Employee discounts and perks program