Remote, United States (or overlap with US hours). Full-time.

About the role

You own whether the evidence, the hazard analysis, and the safety case shape are right. The forward deployed engineer embeds with the design partner and ships the workflow. You review what the models draft, and you say what a safety lead can sign. Models propose, code verifies, humans review and sign.

Certus automates safety evidence. Assessment bodies and the customer's safety leads sign. This seat is not a certification body.

What you'll do

• Review hazard analyses, safety goals, and evidence packets that models draft on a real design-partner system.
• Mark what is missing, what is overclaimed, and what has to change before a safety lead would sign.
• Set the pattern for ISO 26262 work, and for IEC 61508, DO-178C, or SOTIF (ISO 21448) when the product class needs them.
• Work with the forward deployed engineer when a packet does not line up with how that team actually builds.
• Write the review notes and checks the product should enforce on the next account.

What we're looking for

• You have owned a hazard analysis and a safety concept or safety case on a real product in automotive, robotics, industrial autonomy, or aerospace.
• You apply ISO 26262 as a practitioner. You can also work in IEC 61508, DO-178C, or SOTIF (ISO 21448) when the system calls for it.
• You can read a model-drafted analysis and say, in writing, what is wrong and what is still unsigned.
• You can work with software engineers on the workflow. You are not the body that certifies the product.
• You are US-based, or you can overlap US hours. Founders are in Portland, New York, and Seattle.