Product Security Engineer

Cybersecurity Jobs; Cambridge (MA); On-site; USD 140,000 - 170,000; Full time

Benefits offered by this job

Dental insurance

Health insurance

Paid time off

Vision insurance

Job summary

Alpaca Research in Cambridge, MA is seeking an accomplished security-focused systems engineer for an onsite role. You will design and harden a platform connecting local and remote devices, focusing on secure boot, encryption, authentication, and safe agent capabilities.

You will work on building robust device connectivity, secure storage, and network protocols while balancing performance and usability. The position is full-time, onsite in Cambridge, with a competitive salary and comprehensive

Qualifications

• Strong understanding of Linux, TCP/IP, DNS, TLS, VPNs and modern networking protocols.
• Experience with encryption, authentication, key management, OS security, and secure software design.
• Proficiency in Rust, Go, C/C++, or Python, with experience building systems-level software.
• Familiarity with secure device pairing, NAT traversal, remote access, or peer-to-peer networking.
• Understanding of secure handling for sensitive information, credentials, permissions, and integrations.
• Ability to balance security, performance, and usability; ownership of complex technical problems.

Responsibilities

• Build secure connectivity between hardware, phones, computers, and external services across local and remote networks.
• Harden an OS by secure boot, encryption, sandboxing, and dependable software updates.
• Design authentication, access control, credential management, and secure storage.
• Develop device discovery, pairing, remote access, and secure communication protocols.
• Create permission and isolation mechanisms for agents to access data and tools safely.
• Identify vulnerabilities, conduct security reviews, and improve platform reliability.

Skills

Linux

TCP/IP

DNS

TLS

VPNs

Networking protocols

Encryption

Authentication

Key management

Operating system security

Secure software design

Rust

Go

C/C++

Python

Secure device pairing

NAT traversal

Remote access

Peer-to-peer networking

Credential handling

Permissions

Third-party integrations

Security usability balance

Ownership of complex problems

Job description

Alpaca Research is building secure, private, connected infrastructure for AI hardware and the devices that support it. In this onsite role in Cambridge, MA, you will help design and harden the platform that ties together local and remote connectivity, device security, authentication, and safe agent capabilities.

What you will do

• Build secure, seamless connectivity between hardware, phones, computers, and external services across both local and remote networks.
• Harden an operating system by implementing secure boot, encryption, sandboxing, and dependable software updates.
• Design authentication, access control, credential management, and secure storage for sensitive information.
• Develop device discovery, pairing, remote access, and secure communication protocols.
• Create permission and isolation mechanisms that enable agents to safely access personal data, use tools, and interact with external services.
• Find vulnerabilities, run security reviews, and continuously improve the reliability and security of the platform.

What you bring

• Strong understanding of Linux, TCP/IP, DNS, TLS, VPNs, and modern networking protocols.
• Experience with encryption, authentication, key management, operating system security, and secure software design.
• Proficiency in Rust, Go, C/C++, or Python, with experience building systems-level software.
• Familiarity with secure device pairing, NAT traversal, remote access, or peer-to-peer networking.
• Understanding of secure handling for sensitive information, credentials, permissions, and third-party integrations.
• Ability to balance security, performance, and usability when building safe, enjoyable systems.
• Ownership of complex technical problems, including anticipating risks and delivering reliable solutions with minimal direction.

Technologies

• Linux, TCP/IP, DNS, TLS, VPNs
• Rust, Go, C/C++, Python
• NAT traversal, peer-to-peer networking
• Secure boot, encryption, sandboxing

Compensation and location

• Location: Cambridge, MA (onsite)
• Salary: USD 140,000 to 170,000 per year
• Work model: In person

Benefits

• Dental insurance
• Flexible schedule
• Health insurance
• Paid time off
• Vision insurance