Senior Security Engineer at Weave Robotics | CA, US | Rezi

Senior Security Engineer at Weave Robotics

Senior Security Engineer

Weave Robotics · CA, US

1 weeks ago

Senior Security Engineer

Weave Robotics · CA, US

7 days ago
Resume preview

Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

About the Role

As a Senior Security Engineer at Weave, you will work on security and system integrity across the full product surface area, including embedded devices, robot software, cloud infrastructure, APIs, mobile applications, and fleet operations. You will collaborate with engineers to threat-model new systems, identify vulnerabilities, design secure architectures, and build protective infrastructure for real-world robots. This is a hands-on role involving strategy definition, code inspection, system probing, incident investigation, and shipping fixes.

Responsibilities

  • Own product security by defining and improving the security architecture of robots, applications, backend services, and infrastructure.
  • Lead threat modeling and security reviews for new capabilities, identifying attack surfaces and designing mitigations.
  • Secure robot and embedded systems, including device identity, boot/update chains, firmware, embedded Linux, and hardware interfaces.
  • Identify and mitigate vulnerabilities in cloud infrastructure, APIs, authentication systems, web services, and mobile applications.
  • Perform code review, penetration testing, vulnerability research, and adversarial testing; develop automated security testing tools.
  • Build logging, monitoring, detection, and incident-response capabilities for rapid identification and remediation of security events.
  • Establish security standards and processes, educate engineers, and foster a culture of security ownership.

Requirements

  • 4+ years of experience securing connected products, embedded systems, robotics, IoT, autonomous systems, or physical platforms, with cross-domain knowledge.
  • Strong understanding of Linux security, including boundaries, processes, permissions, networking, containers, hardening, and privilege escalation.
  • Experience in application security, including identifying and mitigating vulnerabilities in APIs, backend services, web/mobile applications, and familiarity with OWASP Top 10.
  • Strong programming ability in Python, C++, Go, Rust, or similar languages, with experience in production code and security tooling development.
  • Hands-on experience with source-code review, SAST/DAST, dependency analysis, fuzzing, penetration testing, and security tools (e.g., Burp Suite, Semgrep, CodeQL, Ghidra).
  • Experience with structured threat modeling methodologies (e.g., STRIDE, attack trees).
  • Experience investigating security incidents, analyzing logs/telemetry, performing root-cause analysis, and driving remediation.

Skills

  • Product security
  • Linux security
  • Application security
  • Python
  • C++
  • Go
  • Rust
  • Security testing
  • SAST/DAST
  • Dependency analysis
  • Fuzzing
  • Penetration testing
  • Burp Suite
  • Semgrep
  • CodeQL
  • Ghidra
  • Threat modeling
  • STRIDE
  • Attack trees
  • Incident response
  • Networking
  • Ethernet
  • Wi-Fi
  • TCP/IP
  • Wireshark
  • tcpdump
  • Security standards
  • NIST IR 8259
  • NIST SSDF
  • UL 2900
  • Connected-device security
  • Device provisioning
  • PKI/mTLS
  • Device identity
  • OTA updates
  • Secrets management

Location

  • Remote

Work Type

  • Full-time

Experience Level

  • Senior

About the Company

  • Weave was founded to build robots for the home, believing the next generation of robotics will transform everyday life.
  • The company's robots are already operating in real homes and businesses, enabling rapid improvement from real-world experience.
  • With a growing team, strong customer demand, and capital for expansion, Weave is entering an exciting stage of growth.