Senior Director of Product Security

Responsibilities

• Own Apptronik’s product security strategy, roadmap, charter, team, budget, and organizational structure.
• Design monitoring, telemetry, alerting, continuous security testing, escalation, incident response, tabletop exercise, and red-team programs for Apollo.
• Define and enforce security requirements across hardware, software, firmware, AI models, communications, operating systems, OTA updates, and physical interfaces.
• Own security architecture for OTA updates, including integrity verification, rollback protection, and secure delivery infrastructure.
• Establish physical anti-tamper, anti-cloning, IP protection, vulnerability disclosure, and bug bounty programs.
• Assess hardware suppliers, contract manufacturers, software vendors, AI stack partners, cloud platforms, and data pipeline vendors.
• Track relevant regulatory and export-control requirements and advise on government, defense-adjacent, and international engagements.
• Own security for Apollo’s operational and environmental data pipeline and partner with the CIO on data governance.
• Support customer security integrations, reviews, due diligence, SOC integration, access controls, and audit-log requirements.

Requirements

• 12+ years of experience in security engineering or product security and 5+ years leading security organizations, including managing managers, owning budgets, and defining team structures.
• Experience building a security discipline from the ground up in an emerging hardware or physical-AI domain.
• Deep experience securing embedded systems, robotics, autonomous vehicles, or other physical-AI products.
• Hands-on expertise in secure boot, firmware security, cryptographic key management, network and communications security, and application-layer threats.
• Experience building security monitoring and incident-response programs for production hardware environments.
• Demonstrated ability to translate security risks into product and engineering requirements and enforce security-by-design practices.
• Experience with supply-chain security assessments and third-party vendor risk management.
• Familiarity with OTA update security architecture and field-deployed hardware risks.
• Working knowledge of ITAR, EAR, IEC 62443, NIST, OWASP, and CWE.
• Strong communication skills for executive presentations, systems-architecture discussions, and embedded-engineering requirements.

Benefits

• Direct hire position based in Austin, Texas.
• Direct support from the COO, cross-functional authority, and the opportunity to build a product security program from scratch for real-world humanoid robots.