← All roles

Senior Security Engineer

Weave Robotics· Engineering
Apply on company site
Hybrid (San Francisco, CA)$140k - $200kFull-timePosted 2mo ago

About the role

Senior Security Engineer at Weave Robotics responsible for security and system integrity across embedded devices, cloud infrastructure, APIs, mobile apps, and fleet operations. Hands-on role shaping long-term security strategy while inspecting code, investigating incidents, and shipping fixes.

Responsibilities

  • Own product security: Define and continuously improve the security architecture of our robots, applications, backend services, and supporting infrastructure.
  • Threat modeling & secure design: Lead threat modeling and security reviews for new hardware and software capabilities, identifying remote and physical attack surfaces and designing mitigations before systems reach production.
  • Robot & embedded security: Secure device identity, boot and update chains, firmware, embedded Linux systems, and hardware interfaces.
  • Cloud & application security: Identify and mitigate vulnerabilities across cloud infrastructure, APIs, authentication systems, web services, and iOS/Android applications.
  • Security testing: Perform code review, penetration testing, vulnerability research, and adversarial testing across our product stack. Develop tooling that makes security testing increasingly automated.
  • Detection & incident response: Build logging, monitoring, detection, and incident-response capabilities that allow us to rapidly identify, investigate, contain, and remediate security events.
  • Raise the security bar: Establish practical security standards and processes, educate engineers, and build a culture where security is owned across the engineering organization.

Qualifications

  • Product security expertise: 4+ years securing connected products, embedded systems, robotics, IoT, autonomous systems, or other physical platforms, with experience reasoning across hardware, firmware, embedded Linux, operating systems, networks, cloud services, and applications.
  • Linux & systems security: Strong understanding of Linux security boundaries, processes, permissions, networking, containers, system hardening, and common privilege-escalation techniques.
  • Application security: Experience finding and mitigating vulnerabilities across APIs, backend services, web or mobile applications, including familiarity with OWASP Top 10 and modern application security practices.
  • Software engineering: Strong programming ability in Python, C++, Go, Rust, or similar languages, with the ability to reason about production code and build security tooling yourself.
  • Security testing: Hands-on experience with source-code review, SAST/DAST, dependency analysis, fuzzing, penetration testing, and security tools such as Burp Suite, Semgrep, CodeQL, Ghidra, or similar.
  • Threat modeling: Experience using structured approaches such as STRIDE, attack trees, or similar methodologies to reason about complex systems and drive architectural improvements.
  • Incident response: Experience investigating security incidents, analyzing logs and telemetry, performing root-cause analysis, and driving remediation.

Skills

Required:Product securityThreat modelingEmbedded device securityCloud & application securitySecurity testingDetection & incident response
Nice to have:Security tooling developmentThreat modeling methodologiesIncident investigation

Benefits

  • Not specified in description
Last updated Oct 7, 2026. Interested? Apply on the company site.
Weave Robotics logo

About Weave Robotics

Personal robots for the home--that ship in 2025

Making the world’s first personal robot that's built for the home. Our robot, Isaac, will autonomously tidy up endless messes, fold laundry, and care for your home while you’re away, and we’re shipping our first 30 in fall of 2025.

Company profileWebsite

More open roles at Weave Robotics