Sr. Cloud & Mobile Security Engineer

iRobot; Bedford (MA); On-site; USD 107,000 - 152,500; Full time

Job summary

iRobot is seeking a Senior Engineer on its Product Security team to design, build, and validate secure AWS-based managed services and mobile apps across iOS and Android.

You will assess cloud designs for vulnerabilities, implement automated security testing, align with OWASP and IAM/SOX standards, and collaborate with development teams to reduce risk.

This role requires 7+ years in cloud security, hands-on serverless architectures, and experience with SAST/DAST tooling and threat modeling.

Qualifications

• 7+ years designing, building, and deploying AWS-based managed service infrastructure.
• Experience as security champion within a development team.
• Deep knowledge of secure serverless, API-based services and common call flows.

Responsibilities

• Assess new cloud designs and mobile app feature changes for security vulnerabilities.
• Evaluate production and test builds for adherence to security best practices.
• Develop guidelines for product security based on industry standards.
• Triage vulnerabilities and determine risk and priority.
• Design secure cloud services centralizing critical security functions.
• Implement automated security validation tests for cloud/mobile deployments.
• Work with SAST/DAST tooling to report flaws to dev teams.
• Ensure regulatory needs across markets are met.
• Engage third-party and AI services for penetration testing and threat modeling.

Skills

AWS security

Serverless security

OAuth 2.0

IAM & RBAC

SSO

Python

Node.js

Threat modeling

Penetration testing

Mobile security

Tools

SAST/DAST tooling

AWS cloud

OWASP

Job description

Overview

iRobot is seeking a Senior Engineer on its Product Security team with experience applying security best practices to the design, development, and maintenance of AWS Managed Service architecture and mobile applications for common platforms and languages. iRobot leads the market in consumer robotics and enabling the smart home. The cloud infrastructure underpins millions of connected robots, while the mobile application connects customers to their robot devices.

Salary Range: $107,000.00 - $152,500.00

What You Will Do

• Assess new cloud designs and mobile app feature changes for potential security vulnerabilities.
• Evaluate production and test builds of cloud services and mobile applications for adherence to security best practices.
• Develop guidelines for security of products based on industry standards.
• Triage reported vulnerabilities from the field across a spectrum of sources and determine impact, priority, and risk.
• Design and build secure cloud services that centralize critical security functionality.
• Implement test frameworks for automated security validation testing of cloud and mobile deployments.
• Work with the latest SAST/DAST tooling, AI-powered and traditional, to evaluate and report on flaws and vulnerabilities to the development teams.
• Ensure the components meet the regulatory needs of every market within which iRobot products are sold.
• Engage third-party and AI services for penetration testing, red team exercises, threat modeling, and more.

To Be Successful You Will Have

• 7+ years designing, building, and deploying AWS-based managed service infrastructure, with at least 2 years as a security champion within a development team.
• Extensive knowledge and practical experience designing, building, and deploying secure serverless, API-based services with a deep understanding of the standard callflow of managed service architecture: Gateway to Work Process to Storage to Access.
• Deep knowledge of authentication protocols and technologies, including IAM, SSO, OAuth 2.0, and RBAC.
• Experience building mobile apps for iOS and Android, with a deep understanding of the security best practices of each.
• Understanding of, and alignment with, OWASP standards and best practices, including the OWASP Top Ten lists.
• Strong understanding of AWS policy hierarchy, and practical knowledge of Organizations, SCPs, IAM, et al.
• Python and Node/JavaScript proficiency.
• Practical experience constructing architecture risk assessments and leveraging standard security tooling to build empirical evidence in support of those assessments.
• Preferred: experience at a consumer product company.

Applicants must be authorized to work for any employer in the U.S. We are unable to sponsor or assume sponsorship of any additional employment visas at this time.