About the Role
Foundry Robotics is seeking its first Head of Security to own the entire security and compliance program. This role is responsible for achieving CMMC Level 2 certification, building the security function, and protecting sensitive information across all infrastructure. It is a hands-on builder role with the opportunity to set strategy and hire a team.
Responsibilities
- Drive CMMC Level 2 certification to completion, including scoping, SSP/POA&M ownership, evidence collection, and managing the C3PAO assessment.
- Own NIST SP 800-171 / DFARS 252.204-7012 posture and continuous compliance.
- Stand up and administer the ITAR/EAR export-control program, including technical data segregation and access controls.
- Maintain AS9100 and SOC 2 alignment in coordination with quality and operations.
- Own identity, endpoint, and network security across the technology stack.
- Define and enforce CUI boundary architecture across edge, on-prem, and cloud infrastructure.
- Own the Incident Response Plan, serve in the IRT, run tabletop exercises, and lead real incidents.
- Manage vendor/third-party risk, including ITAR/CMMC-aware external partner collaborations.
- Build the security roadmap and budget, making build-vs-buy decisions.
- Hire, mentor, and lead a security team.
- Partner with engineering, IT, and leadership to integrate security into processes.
Requirements
- Understanding of national security facility requirements.
- Previous/current Experience as a Facility Security Officer.
- Proven track record taking an organization through CMMC Level 2 or NIST SP 800-171 assessment at least once.
- Deep, hands-on knowledge of DFARS, CUI handling, and ITAR/EAR export controls.
- Strong security engineering foundation in identity, endpoint, network, and cloud (AWS) security.
- Experience building or scaling a security function at a startup or fast-growing company.
- U.S. person status required for ITAR-controlled work.
- Comfort operating with high autonomy and ambiguity in a ~30-person startup.
Skills
- CMMC Level 2
- NIST SP 800-171
- DFARS 252.204-7012
- ITAR/EAR export controls
- AS9100
- SOC 2
- Identity security
- Endpoint security
- Network security
- Cloud security (AWS)
- Incident Response
- Vendor risk management
- Security roadmap development
- Budget management
- Team leadership
- JumpCloud MDM
- CrowdStrike EDR
- Google/1Password
- Cloudflare
- AWS
- Tailscale
- Jetson/Orin
- CISSP
- CISM
- CCP/CCA
Location
- San Francisco, CA
Work Type
- Full-time
- In-person
Experience Level
- Head of Security
- Startup experience
Salary/Compensations
- $150,000 to $250,000 USD
Benefits
- Equity compensation
- Comprehensive health, dental and vision coverage
- Generous PTO
About the Company
- Foundry Robotics is building an AI-native robotics manufacturing company focused on deploying advanced assembly and production capability for leading robotics companies and national-security-critical hardware.
- We are reimagining manufacturing through advanced robotics.
- Our mission is to rebuild the American manufacturing industry as an AI-first, assembly-focused, dual-use contract manufacturer.
- We aim to empower manufacturers with intelligent, efficient, and adaptable robotic systems that redefine productivity and quality.
- We are committed to being deeply embedded in the U.S. industrial base.
- Our focus is simple: build adaptive robotic assembly systems that make American manufacturing scalable, resilient, and competitive again.
