Senior Member of Technical Staff: Information Security
Walden Robotics · Cambridge, MA · 2 mo ago
EngineeringFull-time
About the Role
You will own the security of our robots and the systems around them—the teleoperation link an operator uses to drive a robot, the fleet infrastructure that connects and updates machines in the field, the cloud services that hold robot and customer data, and the software supply chain behind it all. As a senior individual contributor, you'll set security strategy and build the security program from a strong technical foundation, partnering closely with our IT and internal-security functions rather than duplicating them. Our robots operate in customers' facilities and handle sensitive operational data; your job is to make sure they—and the systems they depend on—are secure, trustworthy, and worthy of that access.
Responsibilities
- Product & Robot Security: Own the security architecture of the robot platform—secure boot and updates, on-robot data protection, credential and key management, and hardening of the on-robot software stack.
- Teleoperation & Fleet Security: Secure the teleoperation link and fleet infrastructure end-to-end—authentication, encryption, and integrity for the channels and services that command and connect robots.
- Cloud & Application Security: Drive security across our cloud services and applications—identity and access management, secrets management, secure APIs, and protection of robot and customer data.
- Security Program & Strategy: Build and evolve the security program—threat modeling, security reviews, vulnerability management, incident response, and secure-development practices—and set the technical direction as the company scales.
- Compliance & SOC 2: Lead the technical side of compliance efforts including SOC 2, translating requirements into concrete controls and evidence, in partnership with IT and internal stakeholders.
- Cross-Functional Partnership: Work closely with IT, internal security, and engineering teams to align on shared controls, avoid duplication, and embed security into how the whole organization builds.
- Security Culture & Guidance: Serve as a trusted advisor across engineering—reviewing designs, raising the security bar, and helping teams build securely by default.
Requirements
- Security Engineering Depth: Extensive hands-on experience in information/product security, with a track record of securing real systems in production.
- Product & Systems Security: Strong experience securing software systems end-to-end—authentication, encryption, key management, secure APIs, and threat modeling.
- Cloud Security: Deep familiarity with securing cloud infrastructure and services (AWS preferred), including IAM, network security, and secrets management.
- Program Building: Demonstrated ability to build or substantially shape a security program as a senior individual contributor, driving initiatives through influence rather than authority.
- Compliance Experience: Practical experience implementing the technical controls behind compliance frameworks such as SOC 2.
- Software Fluency: Ability to read and reason about code (Python, C++, or similar) and work credibly with engineering teams.
- Cross-Functional Collaboration: Proven success partnering with IT and other stakeholders to deliver security outcomes across organizational boundaries.
Preferred Qualifications
- Experience securing connected devices, IoT, robotics, or other cyber-physical systems.
- Familiarity with securing real-time or networked control systems and the safety implications of security failures.
- Experience with security for OTA update systems and device fleets.
- Background in incident response, detection engineering, or security monitoring.
- Relevant security certifications or demonstrated equivalent expertise.
Benefits
- Competitive total compensation program, including salary, annual cash bonus, and company equity.
- Company-subsidized insurance programs.
- 401(k) with company match.
- Flexible PTO.
- Daily lunch.