Product Security Engineering

We’re building humanoid robots that work in home - doing the chores, handling the tasks, and giving people their time back. To do this right, we have to solve robotics, AI, manufacturing - at the same time, at scale, in a form factor that has to be safe enough to live with your family. We’re not demoing it - we’re shipping it. The Security Engineering team is responsible for protecting our robots, infrastructure, cloud environments, and internal platforms that power 1X. We partner closely with Robotics, AI, Infrastructure, Manufacturing, and Enterprise Engineering teams to embed security directly into how we build and operate humanoid robotics systems.

The Product Security team focuses on the end-to-end security of NEO itself, the operating system, the cryptographic systems that establish trust, the cloud services NEO talks to, and the pipelines that build and sign everything in between.

You will analyze the system services, operating systems, cryptographic infrastructure, networks, and cloud services that power 1X humanoid robots, identify weaknesses before adversaries do, and partner with engineering teams to design and ship the fixes. Audit code and systems across NEO’s stack from bootloader and Linux userspace to cloud services and CI/CD pipelines to identify and drive remediation of security vulnerabilities

Lead security initiatives end-to-end, serving as the technical point of contact and partnering with Robotics, AI, Infrastructure, and Manufacturing teams to design secure-by-default systems

Conduct penetration tests, threat models, and risk assessments against NEO and its supporting infrastructure, prioritizing the issues that matter most

Design and contribute production code for security-critical components such as secure boot chains, code-signing pipelines, attestation flows, and hardened system services

Help define the security architecture for how humanoid robots are provisioned, deployed, updated, and operated at scale

Linux/embedded systems

cloud and CI/CD infrastructure

Strong programming and code-auditing skills in C, C++, Rust, Go, or Python

Excellent systems-thinking across hardware, firmware, software, and cloud boundaries

Strong experience with Linux operating system internals and security mechanisms (namespaces, syscall filtering, Linux systems hardening, least-privilege service design)

Proficiency in software development and code auditing, with shipping experience in C, C++, Rust, Go or Python

Penetration testing experience against real production systems

Offensive security against Linux-based devices vulnerability research, exploit development, and end-to-end attack chains against embedded or production systems

Cloud security (AWS, GCP, or Azure), infrastructure-as-code, Kubernetes, and CI/CD pipeline security

Bachelor’s degree in Computer Science, Information Security, Engineering, or related technical field or equivalent experience

Experience with NVIDIA Jetson or similar SoC platforms

Background in firmware/code-signing pipelines and artifact integrity (SBOMs, supply-chain hardening)

Experience with factory provisioning at scale mass key and certificate distribution, key management, ACME/SCEP

HSM vendor evaluation and procurement experience (Thales, Utimaco, AWS CloudHSM, or similar)

Familiarity with remote device attestation frameworks

Exposure to post-quantum cryptography evaluation and migration planning

Experience supporting robotics, automotive, manufacturing, or other hardware engineering environments

Exposure to zero trust architectures, identity systems, and secrets management platforms

137,861 - $250,000 + Equity

Comprehensive medical, dental, and vision coverage

Generous paid time off, company holidays, and parental leave

Flexible Spending Accounts (FSA) and Health Savings Accounts (HSA) options

Short-term and long-term disability, and life insurance

Employee Assistance Program (EAP) for mental health, financial, and personal support

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender, gender identity or expression, sexual orientation, national origin, ancestry, citizenship, age, marital status, medical condition, genetic information, disability, military or veteran status, justice system impact, or any other characteristic protected under applicable federal, state, or local law.

#