Product Security Engineer , 1X

• Strong investigative and analytical problem-solving skills; the ability to look at an unfamiliar system and find the weak point
• Hands-on experience with secure architecture design across at least one of:
• Linux/embedded systems
• Cryptography and PKI
• Cloud and CI/CD infrastructure
• Strong programming and code-auditing skills in C, C++, Rust, Go, or Python
• Excellent systems-thinking across hardware, firmware, software, and cloud boundaries
• Strong written and spoken communication, and the ability to drive remediation across team and vendor boundaries
• 5+ years of experience in product security, offensive security, or a closely related engineering role
• Strong experience with Linux operating system internals and security mechanisms (namespaces, syscall filtering, Linux systems hardening, least-privilege service design)
• Proficiency in software development and code auditing, with shipping experience in C, C++, Rust, Go or Python
• Penetration testing experience against real production systems
• Security expertise in one or more of:
• Offensive security against Linux-based devices vulnerability research, exploit development, and end-to-end attack chains against embedded or production systems
• Secure boot, verified boot, and Trusted Execution Environments (e.g., OP-TEE, fTPM)
• Cryptography, PKI design, key lifecycle management, and HSM-backed roots of trust
• Cloud security (AWS, GCP, or Azure), infrastructure-as-code, Kubernetes, and CI/CD pipeline security
• Secure firmware update systems for embedded devices over-the-air delivery, rollback protection, signature verification, and recovery from failed updates
• Bachelor’s degree in Computer Science, Information Security, Engineering, or related technical field or equivalent experience

Desirable

• The Security Engineering team is responsible for protecting our robots, infrastructure, cloud environments, and internal platforms that power 1X. We partner closely with Robotics, AI, Infrastructure, Manufacturing, and Enterprise Engineering teams to embed security directly into how we build and operate humanoid robotics systems
• The Product Security team focuses on the end-to-end security of NEO itself, the operating system, the cryptographic systems that establish trust, the cloud services NEO talks to, and the pipelines that build and sign everything in between
• Secure NEO end-to-end. You will analyze the system services, operating systems, cryptographic infrastructure, networks, and cloud services that power 1X humanoid robots, identify weaknesses before adversaries do, and partner with engineering teams to design and ship the fixes
• This role is critical to ensuring that a robot operating inside someone’s home can be trusted by its owner, by its operators, and by us.
• Key Outcomes
• Audit code and systems across NEO’s stack from bootloader and Linux userspace to cloud services and CI/CD pipelines to identify and drive remediation of security vulnerabilities
• Lead security initiatives end-to-end, serving as the technical point of contact and partnering with Robotics, AI, Infrastructure, and Manufacturing teams to design secure-by-default systems
• Conduct penetration tests, threat models, and risk assessments against NEO and its supporting infrastructure, prioritizing the issues that matter most
• Design and contribute production code for security-critical components such as secure boot chains, code-signing pipelines, attestation flows, and hardened system services
• Help define the security architecture for how humanoid robots are provisioned, deployed, updated, and operated at scale