Senior Director of Product Security

Apptronik; Austin (TX); On-site; USD 180,000 - 260,000; Full time

Benefits offered by this job

Direct hire in Austin

Leadership of security program from-sr

Job summary

Apptronik in Austin, Texas seeks a senior Product Security leader to own the security strategy for hardware, software, firmware, AI models, and OTA processes. Build and guide the security program from the ground up for real-world humanoid robots.

You will drive monitoring, incident response, and red-team testing, collaborating with engineering, CIO, and COO to ensure robust data governance, customer security, and regulatory compliance.

Qualifications

• 12+ years in security engineering or product security.
• 5+ years leading security organizations, managing managers and budgets.
• Experience building a security discipline in hardware or physical-AI domains.
• Deep experience securing embedded systems, robotics, autonomous devices, or physical-AI products.
• Hands-on expertise in secure boot, firmware security, cryptographic key management, and network security.
• Experience building security monitoring and incident-response programs for production hardware environments.
• Ability to translate security risks into product and engineering requirements and enforce security-by-design practices.
• Familiarity with ITAR, EAR, IEC 62443, NIST, OWASP, and CWE.

Responsibilities

• Own Apptronik’s product security strategy, roadmap, charter, team, budget, and organizational structure.
• Design monitoring, telemetry, alerting, continuous security testing, escalation, incident response, tabletop exercise, and red-team programs for Apollo.
• Define and enforce security requirements across hardware, software, firmware, AI models, communications, operating systems, OTA updates, and physical interfaces.
• Own security architecture for OTA updates, including integrity verification, rollback protection, and secure delivery infrastructure.
• Establish physical anti-tamper, anti-cloning, IP protection, vulnerability disclosure, and bug bounty programs.
• Assess hardware suppliers, contract manufacturers, software vendors, AI stack partners, cloud platforms, and data pipeline vendors.
• Track relevant regulatory and export-control requirements and advise on government, defense-adjacent, and international engagements.
• Own security for Apollo’s operational and environmental data pipeline and partner with the CIO on data governance.
• Support customer security integrations, reviews, due diligence, SOC integration, access controls, and audit-log requirements.

Skills

Security engineering

Team leadership

Budget management

Security-by-design

Job description

• Own Apptronik’s product security strategy, roadmap, charter, team, budget, and organizational structure.
• Design monitoring, telemetry, alerting, continuous security testing, escalation, incident response, tabletop exercise, and red-team programs for Apollo.
• Define and enforce security requirements across hardware, software, firmware, AI models, communications, operating systems, OTA updates, and physical interfaces.
• Own security architecture for OTA updates, including integrity verification, rollback protection, and secure delivery infrastructure.
• Establish physical anti-tamper, anti-cloning, IP protection, vulnerability disclosure, and bug bounty programs.
• Assess hardware suppliers, contract manufacturers, software vendors, AI stack partners, cloud platforms, and data pipeline vendors.
• Track relevant regulatory and export-control requirements and advise on government, defense-adjacent, and international engagements.
• Own security for Apollo’s operational and environmental data pipeline and partner with the CIO on data governance.
• Support customer security integrations, reviews, due diligence, SOC integration, access controls, and audit-log requirements.

Responsibilities

• Own Apptronik’s product security strategy, roadmap, charter, team, budget, and organizational structure.
• Design monitoring, telemetry, alerting, continuous security testing, escalation, incident response, tabletop exercise, and red-team programs for Apollo.
• Define and enforce security requirements across hardware, software, firmware, AI models, communications, operating systems, OTA updates, and physical interfaces.
• Own security architecture for OTA updates, including integrity verification, rollback protection, and secure delivery infrastructure.
• Establish physical anti-tamper, anti-cloning, IP protection, vulnerability disclosure, and bug bounty programs.
• Assess hardware suppliers, contract manufacturers, software vendors, AI stack partners, cloud platforms, and data pipeline vendors.
• Track relevant regulatory and export-control requirements and advise on government, defense-adjacent, and international engagements.
• Own security for Apollo’s operational and environmental data pipeline and partner with the CIO on data governance.
• Support customer security integrations, reviews, due diligence, SOC integration, access controls, and audit-log requirements.

Requirements

• 12+ years of experience in security engineering or product security and 5+ years leading security organizations, including managing managers, owning budgets, and defining team structures.
• Experience building a security discipline from the ground up in an emerging hardware or physical-AI domain.
• Deep experience securing embedded systems, robotics, autonomous vehicles, or other physical-AI products.
• Hands-on expertise in secure boot, firmware security, cryptographic key management, network and communications security, and application-layer threats.
• Experience building security monitoring and incident-response programs for production hardware environments.
• Demonstrated ability to translate security risks into product and engineering requirements and enforce security-by-design practices.
• Experience with supply-chain security assessments and third-party vendor risk management.
• Familiarity with OTA update security architecture and field-deployed hardware risks.
• Working knowledge of ITAR, EAR, IEC 62443, NIST, OWASP, and CWE.
• Strong communication skills for executive presentations, systems-architecture discussions, and embedded-engineering requirements.

Benefits

• Direct hire position based in Austin, Texas.
• Direct support from the COO, cross-functional authority, and the opportunity to build a product security program from scratch for real-world humanoid robots.