Senior Security Engineer

queueinc • Newark, CA

30d • Hybrid

About The Position

Queue builds robots to fill prescriptions. Our machine is designed to take stock bottles of medication and produce counted, labeled vials, so that pharmacists and technicians can spend their time on patients. Our first product is built to work behind the pharmacy counter and to be operated by pharmacy staff.

You own security engineering for a pharmacy robot and everything it talks to: the machine, its operating-system image, the software that runs on it, the cloud service that commands it, and the path that updates it. When a customer asks how each machine proves its identity, who can reach it and how, and what an independent test found and what was done about it, the answer rests on your work, and every statement in it is backed by something the system produces.

Requirements

• Owned the security of a shipped product end to end, with the ability to describe a problem found, fixed, and followed until it remained fixed.
• Ability to build: read and write code, with deep skill in Rust, TypeScript, or Python, and comfort reading the others.
• Ability to provide reviews with a patch or precise guidance.
• Systems and network depth, including TLS and certificates, identity and access, secrets management, and Linux hardening.
• Ability to reason about trust boundaries from hardware to the cloud.
• Offensive fluency with defensive judgment, including experience running or working closely with penetration tests.
• Ability to rank issues by potential impact and defend deferring them.
• Experience with threat modeling that engineers use, aiming to remove inputs rather than add controls.
• Ability to write exactly and state what is true with evidence-backed strength for engineers, executives, or customer assessors.

Nice To Haves

• Device security: verified start-up, hardware-held keys, signed updates, fleet identity.
• Security in healthcare or another regulated industry.
• Experience with customer security reviews from the supplier's side.
• Cloud security engineering on AWS.
• Supply-chain security: dependency policy, artifact signing, provenance.
• Working knowledge of IEC 62443, UL 2900-1 or NISTIR 8259.

Responsibilities

• Develop and maintain the threat model, including trust boundaries for machine to cloud, operator to screen, update path, remote support, and suppliers, updating it as designs change.
• Conduct security reviews of designs, providing recorded feedback.
• Manage device identity and key custody, including priorities and verification, in collaboration with operating-system image engineers.
• Oversee independent security testing, including scoping, test environment setup, triage, remediation with owning squads, and retesting.
• Establish processes for finding, triaging, and fixing weaknesses in code, dependencies, device images, and cloud services, tracking findings to closure and reporting status.
• Manage the security aspects of incident response, including detection, triage, containment, evidence gathering, and post-incident changes, in collaboration with systems reliability engineers.
• Review and verify customer security statements against system evidence (implementation, configuration, operational records), ensuring accuracy and separation of built, designed, and planned aspects.
• Manage cloud posture, including identity and access, secrets, infrastructure change reviews, and cloud provider detection services.
• Verify security and privacy controls, especially those related to HIPAA, and assess and recommend improvements.
• Manage security exceptions, ensuring they are recorded with approvers and conditions, and that authorized business owners accept remaining risks.

Benefits

• Ownership of security engineering for the machine and its connected systems.
• Opportunity to work on hard problems: trust boundaries from hardware to cloud, device identity and key custody, and machine update paths.
• Small team environment with zero bureaucracy and high trust.
• Direct impact by checking every security statement against evidence before customer delivery.
• Growth opportunities from design review to independent testing and retesting.
• Reports to the Head of Software Engineering with significant autonomy and influence.
• Work with engineers building on-machine software, cloud services, and operating-system images.
• Hybrid work model, three days a week at headquarters in the Bay Area.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed