Security Engineer
xdof | Full-Time | San Mateo
At xdof, we’re at an inflection point. Frontier labs are racing to build general-purpose robots, and high-quality training data is the bottleneck. We’re building the foundation behind the foundation models – the data collection systems, operational capability, exabyte-scale data warehouse, and software toolchain – to help our partners drive the field forward
.As more enterprise partners depend on our platform, security is infrastructure. We’re looking for a Security Engineer to own the security posture of our AWS environment and the external-facing platform our B2B customers integrate with every day. We’re early-stage, so you’ll have broad scope for security ownership across the stack
.
What You’ll
DoSecurity engineers build the controls and trust layer that let our platform scale safely. Sample projects includ
- e:designing and enforcing IAM policies and permission boundaries so every user and service operates at minimum privile
- gehardening the external APIs our partners integrate with, including auth flows, threat modeling, rate limiting, and DDoS protecti
- onarchitecting secure AWS infrastructure with IaC and automated guardrails that catch misconfigurations before producti
- onsecuring Kubernetes clusters through RBAC, network policies, admission controllers, and secrets manageme
- ntaddressing lower-level concerns such as firmware pipelines, on-device security, or secure data ingestion from robotics hardwa
re
About
YouBaseline skil
- ls:5+ years in security engineering or software engineering with a strong security fo
- cusdeep hands-on experience with AWS security primitives (IAM, SCPs, VPCs, networking, logging, and encryption servic
- es)track record securing external-facing APIs and platforms in a B2B cont
- extproficiency with Infrastructure-as-Code and a GitOps-driven approach to managing environme
- ntsfluency with Python or
GoYou might be a good fit if y
- ou:have experience with embedded systems, firmware security, or securing hardware-software interfa
- ceshave prior experience in robotics, IoT, or environments where cloud platforms meet physical devi
- ceshave familiarity with SOC 2 compliance and experience automating evidence collection and audit preparat
- ionhave worked across multiple security domains (network, application, infrastructure, device) and enjoy context-switch
- ingare very comfortable working in 0→1 environme
- ntsare mission-driven and passionate about robotics: work at xdof is fast-paced and constant. We hope you love what you’re going to be doing, because you’ll be doing a lot of
it!