Senior Security Engineer

Tech Ladies®; San Francisco (CA); On-site; USD 140,000 - 200,000; Full time

Job summary

Weave Robotics in San Francisco is seeking a Senior Security Engineer to protect our home robotics platform from device to cloud. You will work on security and system integrity across embedded devices, cloud infrastructure, APIs, and mobile apps, collaborating with engineers to threat-model, identify vulnerabilities, design secure architectures, and ship fixes.

This highly hands-on role lets you define long-term security strategy while inspecting code, probing systems, and building tools to

Qualifications

• 4+ years securing connected products, embedded systems, robotics, IoT, autonomous systems, or other physical platforms.

Responsibilities

• Own product security: Define and continuously improve the security architecture of our robots, applications, backend services, and supporting infrastructure.
• Threat modeling & secure design: Lead threat modeling and security reviews for new hardware and software capabilities, identifying remote and physical attack surfaces and designing mitigations before systems reach production.
• Robot & embedded security: Secure device identity, boot and update chains, firmware, embedded Linux systems, and hardware interfaces.
• Cloud & application security: Identify and mitigate vulnerabilities across cloud infrastructure, APIs, authentication systems, web services, and iOS/Android applications.
• Security testing: Perform code review, penetration testing, vulnerability research, and adversarial testing across our product stack. Develop tooling that makes security testing increasingly automated.
• Detection & incident response: Build logging, monitoring, detection, and incident‑response capabilities that allow us to rapidly identify, investigate, contain, and remediate security events.
• Raise the security bar: Establish practical security standards and processes, educate engineers, and build a culture where security is owned across the engineering organization.

Skills

Product security

Linux security

App security

Programming languages

Security tooling

Threat modeling

Incident response

Tools

Burp Suite

Semgrep

CodeQL

Ghidra

Job description

All Jobs

Featured

A featured role. The employer reviews Tech Ladies applicants first.

Weave Robotics

Senior Security Engineer

San Francisco

Full-time

At a glance

$140k–$200k / yr

Location

San Francisco

Job type

Full-time

Experience level

Mid‑Senior ICs

Posted

3 days ago

Apply before

December 18, 2026

You apply through LinkedIn.

Why apply via Tech Ladies

Our Partners give Tech Ladies' applications priority review as they source candidates.

Company

Industry

Robotics Engineering

Company size

1-50

Headquarters

Funding

Private

WebsiteLinkedIn

New tech roles every week

Subscribe

Hiring tech talent?

Post a job

Job Description

Join Us, and Ship Robots

Weave was founded to build the robots we’d want to have in our own home. We believe the next generation of robotics will transform everyday life by enabling people to do more and to reclaim time to spend on what’s important.

We also believe robots are in a sense like any other product: to matter, they have to ship. Our robots are already operating in real homes and businesses, giving us the opportunity to rapidly improve from real-world experience. With a growing team, strong customer demand, and capital for expansion, we’re entering an exciting stage of growth—and we’re looking for people with exceptional talent and standards to help bring home robotics to millions of households.

The Role

At Weave, we’re building robots designed to operate in the most personal environment there is: the home. Our robots combine cameras, sensors, actuators, embedded compute, cloud infrastructure, and consumer applications into a deeply integrated system—and earning our customers’ trust requires making security a fundamental part of that system from the beginning.

As a Senior Security Engineer, you’ll work on security and system integrity across the full surface area of our product, from embedded devices and robot software to cloud infrastructure, APIs, mobile applications, and fleet operations. You’ll work directly with engineers to threat‑model new systems, find vulnerabilities, design secure architectures, and build the infrastructure that protects robots already operating in the real world. This is a highly hands‑on role: you’ll help define our long‑term security strategy while remaining close enough to the product to inspect code, probe systems, investigate incidents, and ship fixes yourself.

Responsibilities

• Own product security: Define and continuously improve the security architecture of our robots, applications, backend services, and supporting infrastructure.
• Threat modeling & secure design: Lead threat modeling and security reviews for new hardware and software capabilities, identifying remote and physical attack surfaces and designing mitigations before systems reach production.
• Robot & embedded security: Secure device identity, boot and update chains, firmware, embedded Linux systems, and hardware interfaces.
• Cloud & application security: Identify and mitigate vulnerabilities across cloud infrastructure, APIs, authentication systems, web services, and iOS/Android applications.
• Security testing: Perform code review, penetration testing, vulnerability research, and adversarial testing across our product stack. Develop tooling that makes security testing increasingly automated.
• Detection & incident response: Build logging, monitoring, detection, and incident‑response capabilities that allow us to rapidly identify, investigate, contain, and remediate security events.
• Raise the security bar: Establish practical security standards and processes, educate engineers, and build a culture where security is owned across the engineering organization.

What You'll Bring

• Product security expertise: 4+ years securing connected products, embedded systems, robotics, IoT, autonomous systems, or other physical platforms, with experience reasoning across hardware, firmware, embedded Linux, operating systems, networks, cloud services, and applications.
• Linux & systems security: Strong understanding of Linux security boundaries, processes, permissions, networking, containers, system hardening, and common privilege‑escalation techniques.
• Application security: Experience finding and mitigating vulnerabilities across APIs, backend services, web or mobile applications, including familiarity with OWASP Top 10 and modern application security practices.
• Software engineering: Strong programming ability in Python, C++, Go, Rust, or similar languages, with the ability to reason about production code and build security tooling yourself.
• Security testing: Hands‑on experience with source‑code review, SAST/DAST, dependency analysis, fuzzing, penetration testing, and security tools such as Burp Suite, Semgrep, CodeQL, Ghidra, or similar.
• Threat modeling: Experience using structured approaches such as STRIDE, attack trees, or similar methodologies to reason about complex systems and drive architectural improvements.
• Incident response: Experience investigating security incidents, analyzing logs and telemetry, performing root‑cause analysis, and driving remediation.

Nice to Have

• Networking depth: Familiarity with Ethernet, Wi‑Fi, TCP/IP, and common network protocols, including experience using Wireshark, tcpdump, or similar packet‑analysis tools to diagnose networking and security issues.
• Security standards: Familiarity with security standards and guidance relevant to connected consumer products, such as NIST IR 8259, NIST SSDF, UL 2900, or similar.
• Connected‑device security: Experience with device provisioning, PKI/mTLS, device identity, signed OTA updates, credential rotation/revocation, and fleet‑scale secrets management.

Interested in this role?

Why apply via Tech Ladies

Our Partners give Tech Ladies' applications priority review as they source candidates.