Product Security Engineer

1X • San Carlos, CA

3d • Onsite

About The Position

1X is building humanoid robots designed to perform household chores and tasks, aiming to give people back their time. This endeavor involves solving complex challenges in robotics, AI, and manufacturing simultaneously, at scale, and in a safe form factor for home environments. The company has been developing these robots since 2014, and the flagship product, NEO, is a home robot designed for real-world operation alongside people. 1X is currently shipping NEO and is seeking individuals inspired by the mission to change how humans spend their time by safely creating abundance.

The Security Engineering team at 1X is responsible for safeguarding the company's robots, infrastructure, cloud environments, and internal platforms. They collaborate closely with various engineering teams, including Robotics, AI, Infrastructure, Manufacturing, and Enterprise Engineering, to integrate security into the development and operational processes of humanoid robotics systems. The Product Security team specifically focuses on the comprehensive security of the NEO robot, its operating system, cryptographic systems, cloud services, and the build and signing pipelines.

Requirements

• Strong investigative and analytical problem-solving skills; the ability to look at an unfamiliar system and find the weak point
• Hands-on experience with secure architecture design across at least one of: Linux/embedded systems, cryptography and PKI, cloud and CI/CD infrastructure
• Strong programming and code-auditing skills in C, C++, Rust, Go, or Python
• Excellent systems-thinking across hardware, firmware, software, and cloud boundaries
• Strong written and spoken communication, and the ability to drive remediation across team and vendor boundaries
• 5+ years of experience in product security, offensive security, or a closely related engineering role
• Strong experience with Linux operating system internals and security mechanisms (namespaces, syscall filtering, Linux systems hardening, least-privilege service design)
• Proficiency in software development and code auditing, with shipping experience in C, C++, Rust, Go or Python
• Penetration testing experience against real production systems
• Security expertise in one or more of: Offensive security against Linux-based devices, vulnerability research, exploit development, and end-to-end attack chains against embedded or production systems
• Secure boot, verified boot, and Trusted Execution Environments (e.g., OP-TEE, fTPM)
• Cryptography, PKI design, key lifecycle management, and HSM-backed roots of trust
• Cloud security (AWS, GCP, or Azure), infrastructure-as-code, Kubernetes, and CI/CD pipeline security
• Secure firmware update systems for embedded devices over-the-air delivery, rollback protection, signature verification, and recovery from failed updates
• Bachelor’s degree in Computer Science, Information Security, Engineering, or related technical field or equivalent experience

Nice To Haves

• Experience with NVIDIA Jetson or similar SoC platforms
• Background in firmware/code-signing pipelines and artifact integrity (SBOMs, supply-chain hardening)
• Experience with factory provisioning at scale mass key and certificate distribution, key management, ACME/SCEP
• HSM vendor evaluation and procurement experience (Thales, Utimaco, AWS CloudHSM, or similar)
• Familiarity with remote device attestation frameworks
• Exposure to post-quantum cryptography evaluation and migration planning
• Experience supporting robotics, automotive, manufacturing, or other hardware engineering environments
• Exposure to zero trust architectures, identity systems, and secrets management platforms
• Experience operating in fast-paced startup environments

Responsibilities

• Audit code and systems across NEO’s stack from bootloader and Linux userspace to cloud services and CI/CD pipelines to identify and drive remediation of security vulnerabilities
• Lead security initiatives end-to-end, serving as the technical point of contact and partnering with Robotics, AI, Infrastructure, and Manufacturing teams to design secure-by-default systems
• Conduct penetration tests, threat models, and risk assessments against NEO and its supporting infrastructure, prioritizing the issues that matter most
• Design and contribute production code for security-critical components such as secure boot chains, code-signing pipelines, attestation flows, and hardened system services
• Help define the security architecture for how humanoid robots are provisioned, deployed, updated, and operated at scale

Benefits

• Comprehensive medical, dental, and vision coverage
• Generous paid time off, company holidays, and parental leave
• 401(k) plan with company match (100% on the first 3% of contributions, 50% on the next 2%)
• Flexible Spending Accounts (FSA) and Health Savings Accounts (HSA) options
• Commuter benefits (transit and parking)
• Short-term and long-term disability, and life insurance
• Employee Assistance Program (EAP) for mental health, financial, and personal support
• Onsite snacks and catered lunches

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: Associate degree