Principal Product Cybersecurity Assurance Engineer

Humanoid • Cambridge, MA

3d

About The Position

Humanoid is seeking a Principal Product Cybersecurity Assurance Engineer to lead product security across the HMND‑01 platform family: the Alpha Wheeled industrial robot and the Alpha Bipedal home robot, both powered by the KinetIQ VLM/VLA-based AI framework. The role is part of the Systems Engineering and Architecture Team and works closely with product, firmware, autonomy, and hardware teams. It defines and maintains cybersecurity assurance strategy throughout the product lifecycle, from initial concept through post-market deployment.

The position treats security as an engineering discipline integrated with functional safety. It requires influencing security architecture across complex programmes, developing defensible security cases for novel cyber-physical systems, and leading a cross-functional team of security engineers. The role covers product security delivery, assurance and certification, incident response and lifecycle security, and commercial and bid support.

Requirements

• Hands-on experience with ISO 27001, ISO 27004, ISO 27005, and the NIST Risk Management Framework, applied to regulated hardware or embedded product programmes.
• Experience owning a security risk management system for highly regulated, safety-critical products, with a background in automotive, commercial vehicles, or industrial automation.
• Working knowledge of IEC 62443 and ability to adapt ISO/SAE 21434 lifecycle methodologies to robotic or electromechanical products.
• Understanding of engineering development lifecycles and how product cybersecurity aligns with systems engineering, functional safety, and hardware/software co-development.
• Ability to interpret penetration test reports and author structured, risk-prioritised remediation action plans.
• Clear, structured communication skills, including the ability to explain complex security risks to technical engineers and executive stakeholders.

Nice To Haves

• Familiarity with TARA or equivalent threat-modelling methodologies such as STRIDE or PASTA, applied to embedded or OT/IT-convergent systems.
• Understanding of secure-by-design principles for AI/ML-enabled systems, including inference-pipeline security, model integrity, and cloud-to-edge communications.
• Exposure to CAN bus, Ethernet backbone, or wireless-interface security in mobile, vehicular, or robotic systems.
• Experience contributing to or establishing a PSIRT process or coordinated vulnerability disclosure programme.
• Knowledge of UL 4600, UL 3300, or ISO 13482, and understanding of how cybersecurity evidence integrates into safety-case arguments.
• Prior engagement with certification bodies such as TUV, UL, or BSI, or standards development organisations such as ISO TC 184, IEC TC 65, SAE, or IEEE RAS.

Responsibilities

• Lead and develop a cross-functional team of security engineers and remain accountable for delivering product security services throughout the HMND‑01 development lifecycle.
• Define product security requirements and advise development teams on implementation standards, techniques, and toolchains for embedded and AI-enabled robotic systems.
• Partner with cross-functional teams to develop security protocols, tools, and processes addressing emerging threats, including risks in the KinetIQ AI inference pipeline and cloud-to-robot communications.
• Own and maintain audit-ready cybersecurity artefacts, including Security Management Plans, TARA reports, risk assessments, and remediation action plans for both platforms.
• Drive security assurance throughout the product lifecycle and contribute to continual improvement of the organisation’s security engineering capability.
• Ensure compliance with cybersecurity obligations under the EU Machinery Regulation 2023/1230 where cyber controls intersect with safety-critical functions, IEC 62443, and the EU Cyber Resilience Act.
• Provide independent Information Assurance reviews and risk assessments for complex, high-impact projects, particularly cyber-physical systems where compromise could cause physical harm.
• Review and advise on security risk assessments, mitigation plans, mitigation gap analyses, and security management documentation supporting system cybersecurity certification.
• Establish and maintain a Product Security Incident Response process, including coordinated vulnerability disclosure, patch deployment pipelines, and post-field incident analysis.
• Define and oversee security monitoring requirements for deployed fleets and ensure field data informs risk files and security artefacts in line with post-market surveillance obligations.
• Support product bids, services, and proposals by producing work-package descriptions and cost estimates that include product security scope.
• Represent Humanoid’s security posture in customer and partner engagements, regulatory consultations, and certification body interactions.

Benefits

• Comprehensive health coverage for US-based employees, including fully paid medical, dental, and vision insurance, virtual care, and employee assistance resources.
• 23 days of accrued PTO, separate sick leave, and paid company holidays.
• 401(k) retirement plan with a 4% employer match.
• Stock options with meaningful upside as the company scales.
• Free daily catered lunch, snacks, and drinks in-office.
• Collaboration with engineers, researchers, and product experts in AI and robotics.
• Freedom to influence the product and own key initiatives.

What This Job Offers

• Job Type: Full-time
• Career Level: Principal
• Education Level: No Education Listed