Senior Cloud & Mobile Security Architect

iRobot; Bedford (MA); On-site; USD 107,000 - 152,500; Full time

Job summary

iRobot is seeking a Senior Engineer on its Product Security team to design, build, and validate secure AWS-based managed services and mobile apps across iOS and Android.

You will assess cloud designs for vulnerabilities, implement automated security testing, align with OWASP and IAM/SOX standards, and collaborate with development teams to reduce risk.

This role requires 7+ years in cloud security, hands-on serverless architectures, and experience with SAST/DAST tooling and threat modeling.

Qualifications

• 7+ years designing, building, and deploying AWS-based managed service infrastructure.
• Experience as security champion within a development team.
• Deep knowledge of secure serverless, API-based services and common call flows.

Responsibilities

• Assess new cloud designs and mobile app feature changes for security vulnerabilities.
• Evaluate production and test builds for adherence to security best practices.
• Develop guidelines for product security based on industry standards.
• Triage vulnerabilities and determine risk and priority.
• Design secure cloud services centralizing critical security functions.
• Implement automated security validation tests for cloud/mobile deployments.
• Work with SAST/DAST tooling to report flaws to dev teams.
• Ensure regulatory needs across markets are met.
• Engage third-party and AI services for penetration testing and threat modeling.

Skills

AWS security

Serverless security

OAuth 2.0

IAM & RBAC

SSO

Python

Node.js

Threat modeling

Penetration testing

Mobile security

Tools

SAST/DAST tooling

AWS cloud

OWASP

Job description

iRobot is seeking a Senior Engineer on its Product Security team to design, build, and validate secure AWS-based managed services and mobile apps across iOS and Android.

You will assess cloud designs for vulnerabilities, implement automated security testing, align with OWASP and IAM/SOX standards, and collaborate with development teams to reduce risk.

This role requires 7+ years in cloud security, hands-on serverless architectures, and experience with SAST/DAST tooling and threat modeling.