Product Security Engineer

About the role

We’re building humanoid robots that work in homes, handling chores and tasks to give people their time back. It’s challenging, but we’ve solved the hard problems and now we’re focusing on scaling and making a real impact.

Responsibilities

• Analyze the system services, operating systems, cryptographic infrastructure, networks, and cloud services powering our robots to identify and drive remediation of security vulnerabilities.
• Lead security initiatives end-to-end, serving as the technical point of contact and collaborating with Robotics, AI, Infrastructure, and Manufacturing teams to design secure-by-default systems.
• Conduct penetration tests, threat models, and risk assessments against our robots and their supporting infrastructure, prioritizing the most critical issues.
• Design and contribute production code for security-critical components such as secure boot chains, code-signing pipelines, attestation flows, and hardened system services.
• Define the security architecture for how our humanoid robots are provisioned, deployed, updated, and operated at scale.

Key Outcomes

• Audit code and systems across NEO’s stack from bootloader and Linux userspace to cloud services and CI/CD pipelines to identify and drive remediation of security vulnerabilities.
• Lead security initiatives end-to-end, serving as the technical point of contact and collaborating with Robotics, AI, Infrastructure, and Manufacturing teams to design secure-by-default systems.
• Conduct penetration tests, threat models, and risk assessments against NEO and its supporting infrastructure, prioritizing the issues that matter most.
• Design and contribute production code for security-critical components such as secure boot chains, code-signing pipelines, attestation flows, and hardened system services.
• Define the security architecture for how humanoid robots are provisioned, deployed, updated, and operated at scale.

Minimum Requirements

• 5+ years of experience in product security, offensive security, or a closely related engineering role.
• Strong experience with Linux operating system internals and security mechanisms (namespaces, syscall filtering, Linux systems hardening, least-privilege service design).
• Proficiency in software development and code auditing, with shipping experience in C, C++, Rust, Go, or Python.
• Penetration testing experience against real production systems.
• Security expertise in one or more of: Offensive security against Linux-based devices, vulnerability research, exploit development, and end-to-end attack chains against embedded or production systems.
• Cryptography, PKI design, key lifecycle management, and HSM-backed roots of trust.
• Cloud security (AWS, GCP, or Azure), infrastructure-as-code, Kubernetes, and CI/CD pipeline security.
• Secure firmware update systems for embedded devices over-the-air delivery, rollback protection, signature verification, and recovery from failed updates.
• Bachelor’s degree in Computer Science, Information Security, Engineering, or related technical field or equivalent experience.

Preferred Skills

• Experience with NVIDIA Jetson or similar SoC platforms.
• Background in firmware/code-signing pipelines and artifact integrity (SBOMs, supply-chain hardening).
• Experience with factory provisioning at scale, mass key and certificate distribution, key management, ACME/SCEP, HSM vendor evaluation and procurement.
• Familiarity with remote device attestation frameworks.
• Exposure to post-quantum cryptography evaluation and migration planning.
• Experience supporting robotics, automotive, manufacturing, or other hardware engineering environments.
• Exposure to zero trust architectures, identity systems, and secrets management platforms.
• Experience operating in fast-paced startup environments.