Security Engineer

Menlo Research; Singapore; On-site; SGD 180,000 - 240,000; Full time

Job summary

Menlo Research seeks a security-focused software engineer to own security across cloud and on‑prem deployments for our Humanoid robot platform. You will define the security strategy, threat model, and tooling, building standards for the team.

You will own secrets management, access control, encryption, and secure remote access, implementing defenses across Terraform, Helm, Ansible and Kubernetes. This is the first security hire with broad impact.

Qualifications

• 5+ years as a software or security engineer with hands-on depth.
• Experience defining security boundaries in distributed systems.
• Hands-on Linux systems engineering and networking.
• Proficiency with IaC tooling like Terraform, Helm, or Ansible.
• Experience with Kubernetes and securing containerized environments.
• Ability to threat model novel attack surfaces including hardware-adjacent software.
• Proficiency in Python or Go.
• Comfortable as the first security hire without a playbook.

Responsibilities

• Own the unified security strategy across cloud and on-prem deployments.
• Define threat surface, tooling, and security standards for the team.
• Design and enforce RBAC and modern authentication across fleet and platform.
• Implement end-to-end encryption for data at rest and in transit.
• Establish secure remote access for engineers in the field.
• Own secrets management, credential lifecycle, and supply chain security.
• Audit and harden IaC deployments (Terraform, Helm, Ansible).
• Build tooling for vulnerability management, secret scanning, and incident detection.
• Embed security reviews into deployment loops (packaging, versioning, rollback).
• Collaborate with Infrastructure on security requirements for cloud usage.

Skills

Security engineering

Distributed systems

Linux sysadmin

Kubernetes security

Python/Go

Threat modeling

Strong comms

First security hire

Tools

Terraform

Helm

Ansible

Job description

About Menlo

Menlo Research is an Applied R&D lab building Asimov, an open‑source humanoid robot platform, and the full software stack that powers it. Our mission is to make humanoid labor economically viable -- turning software into physical labor at scale. We build across the full stack: hardware architecture, locomotion, autonomy, simulation, and infrastructure. We move fast, ship to real robots, and open‑source everything we can. If you want your work to matter beyond a paper or a demo, this is the place.

The Role

This is not a role for running scans or writing policies that gather dust. We want someone who thinks like a builder and a breaker: someone who gets deep into the stack, understands how things are supposed to work, and knows what happens when they don’t. Menlo does not have a dedicated security function yet. You will be the first. That means defining the unified security strategy across cloud and on‑premise robot deployments, owning the threat surface, building the tooling, and setting the standards the rest of the team builds against. Full ownership, no inherited playbook.

What You'll Do

• Own the threat model across Menlo Platform: Robot API, Asimov API, Uranus, Cyclotron, and the deployment loop
• Develop and maintain a comprehensive security framework spanning Menlo Cloud and on‑premise robot deployments at customer and operator sites
• Design and enforce RBAC and modern authentication protocols across the fleet and developer platform
• Implement end‑to‑end encryption for data at rest and in transit, covering robotic telemetry, sensor streams, and training data
• Establish secure and auditable remote access solutions for engineers troubleshooting robots in the field
• Define and enforce the trust model across Platform APIs, covering authentication, authorization, and agent identity
• Model attack surfaces in the agent‑to‑hardware translation layer, with focus on safety envelope bypass, rollback integrity, and telemetry tampering
• Own secrets management, credential lifecycle, and supply chain security for Platform dependencies
• Audit and harden infrastructure deployments across IaC tooling including Terraform, Helm, and Ansible
• Build and maintain tooling for vulnerability management, secret scanning, dependency auditing, and incident detection
• Embed security review into the deployment loop: packaging, versioning, and rollback pipelines
• Partner with Infrastructure on security requirements for Menlo Cloud without owning the infrastructure itself

What We're Looking For

• 5 or more years as a software or security engineer with strong hands‑on security depth
• Experience defining security boundaries in distributed systems, including hybrid cloud and on‑premise environments
• Hands‑on Linux systems engineering and networking experience
• Proficiency with IaC tooling such as Terraform, Helm, or Ansible
• Experience with Kubernetes and securing containerized environments
• Ability to threat model novel attack surfaces, including hardware‑adjacent or agent‑driven software
• Proficiency in Python or Go
• Comfortable operating as the first security hire, without a team or playbook to fall back on
• Strong engineering judgment and clear written communication

Bonus Points

• Experience with robotics, embedded systems, or IoT security
• Familiarity with agentic frameworks, LLM infrastructure, or AI platform security
• Prior work in environments with physical safety requirements
• Contributions to open‑source security tooling or research
• Experience with secure remote access solutions for industrial or field‑deployed hardware

Why Join Menlo?

You will be the first security hire at a company building at the intersection of embodied AI and humanoid robotics. What you build here will be foundational. There is no bureaucracy between you and the problem. If you want to own something hard and novel end to end, this is it.

A Note on AI

You don't need deep AI expertise for every role, but we do expect everyone at Menlo to be intellectually curious, drawn to tinkering and discovery, and excited to use AI as a real collaborator in their work. For some roles, AI fluency is a core requirement. When that's the case, we'll say so explicitly in the qualifications. People who thrive here don't treat AI as a novelty. They use it to think better, and make their work easier for others to build on.

Equal Opportunity and Accommodations

We hire talented people from a wide range of backgrounds. If you're excited about a role but don't meet every bullet, we still encourage you to apply. Menlo Research is an equal opportunity employer and does not discriminate on the basis of any legally protected characteristic. Menlo provides reasonable accommodations during the application process. If you need one, please let your recruiter know.