IT & Security Lead

Simbe Robotics; San Francisco (CA); On-site; USD 135,000 - 165,000; Full time

Benefits offered by this job

Equity compensation

Comprehensive medical benefits

Incentives and performance bonuses

Job summary

Simbe Robotics is looking for a hands-on IT Security & Compliance Specialist in San Francisco, CA. This role requires a strong foundation in corporate IT and security, with 5–8 years of relevant experience, particularly in startups. The responsibilities include overseeing endpoint security and managing device lifecycle support. The position offers a competitive salary range of $135,000 - $165,000 annually and emphasizes a holistic approach to compensation, including equity and diverse benefits.

Qualifications

• 5–8 years of corporate IT and security experience, preferably starting up.
• Familiarity with AI/ML security frameworks.
• Experience with embedding security in product or enterprise environments.

Responsibilities

• Manage device lifecycle and desktop support.
• Oversee endpoint security and incident response.
• Advise on security architecture for product features.

Skills

Corporate IT and security experience

Hands-on security and privacy certifications

Knowledge of MDM, SSO/IdP, endpoint protection

Knowledge of OT/IoT security concepts

AI/ML security risks understanding

Job description

Simbe Robotics is a leading retail robotics company providing in-store intelligence solutions that help retailers optimize operations, improve shelf execution, and deliver valuable data insights. Our autonomous robots and multi-modal data collection systems are transforming how retailers manage inventory and make data-driven decisions.

Position Overview

Simbe deploys AI-powered robots across enterprise retail at scale. Winning and retaining those accounts requires a security posture that matches the sophistication of the customers we serve — and the complexity of what we build. This role owns that posture end to end: from the laptops on employees' desks to the robots operating on store floors.

This is a high level and hands‑on IC role with high ownership and direct access to leadership. The right person is equally comfortable as the first call when something breaks and the one presenting our compliance roadmap to the board.

Responsibilities

Corporate IT & Operations

• Device lifecycle and desktop support for a distributed workforce
• Onboarding/offboarding provisioning across the full SaaS and tooling stack
• Office network design, maintenance, and physical access controls at HQ
• SSO/IdP, MDM, and SaaS access management
• System administration for company-wide SaaS tools (Google Workspace, Slack, Atlassian, and others); collaborate with Engineering on access and security where corporate and infrastructure systems intersect

Security & Compliance

• Endpoint security, IAM, vulnerability management, and incident response
• Security policy development and employee security awareness program
• Own security and privacy certification end to end: readiness, controls implementation, audit coordination, and ongoing compliance

Product & Connected Systems Security

• Stay current on cybersecurity risks relevant to robotics, edge AI, and retail environments; translate emerging threats into actionable guidance for Engineering and Product
• Advise on security architecture for new product features and customer integrations — threat modeling, access controls, data handling — without being in the critical path
• Assess cybersecurity risk across the robot fleet and customer‑deployed systems; surface findings to leadership and flag issues that require remediation

AI Security & Governance

• Serve as Simbe's internal expert on AI/ML security: track emerging attack vectors, threat research, and evolving frameworks and translate findings into actionable guidance for Engineering, Product, and leadership
• Assess security risks in Simbe's AI systems — model endpoints, inference pipelines, LLM integrations — and recommend controls around adversarial inputs, prompt injection, model extraction, and data exposure
• Develop and enforce AI tool governance policies for internal use: procurement criteria, data handling guardrails, and acceptable use standards
• Help employees use AI tools effectively and safely; provide training and guardrails as the tooling landscape evolves

Requirements

• 5–8 years across corporate IT and security; startup experience required
• Hands‑on security and privacy certifications to support business growth
• Strong command of MDM, SSO/IdP, endpoint protection, and cloud security
• Working knowledge of OT/IoT security concepts; edge device or embedded systems security experience a plus
• Deep knowledge of AI/ML security risks and familiarity with applicable frameworks (NIST AI RMF, OWASP LLM Top 10, MITRE ATLAS); experience applying these in a product or enterprise environment, not just theoretical exposure
• Operates well without a team under them; comfortable building from scratch

$135,000 - $165,000 a year

The base salary offered is based on market location, and may vary further depending on individualized factors for job candidates, such as job‑related knowledge, skills, experience, and other objective business considerations. Subject to those same considerations, the total compensation package for this position may also include other elements, including equity compensation, in addition to a full range of medical, financial, and/or other benefits.

Simbe’s approach emphasizes total rewards - base pay, equity, incentives, and benefits - rather than viewing compensation as cash alone. We believe the full package, including ownership through equity and well‑being support, is what drives engagement, retention, and alignment with our mission.