About the job
Join Our Mission: Innovating Robotics for a Safer Future
Diligent Robotics is at the forefront of developing intelligent robots that enhance safety and efficiency in real-world environments. We embrace agility, continuous deployment, and pragmatic engineering principles to create reliable high-risk systems.
We are seeking a Staff Technical Lead Manager (TLM) in Security Engineering — a proactive leader who will manage a dynamic team while executing impactful technical initiatives. In this role, you will take charge of the Security Engineering roadmap, deliver secure features, mentor junior engineers, and elevate product and operational security across embedded systems, cloud services, and our supply chain.
Key Responsibilities:
- Lead & Execute: As a TLM, define the technical vision, oversee deliverables, and actively contribute as an individual contributor through design, architecture, coding, reviews, and hands-on proof-of-concept development.
- Build the Security Program: Formulate and implement the long-term Security Engineering roadmap for device, firmware, cloud, and service security, prioritizing efforts to mitigate the highest business risks.
- Secure Product Lifecycle: Integrate security throughout the product development process, including threat modeling, secure design reviews, architecture assessments, secure coding practices, and comprehensive verification/testing (fuzzing, static/dynamic analysis).
- Device & Firmware Security: Lead initiatives on secure boot processes, hardware root of trust, cryptographic design/PKI, OTA update security, device identity management, and secrets management for embedded systems and sensors.
- Cloud & Infrastructure Security: Ensure the security of backend services, CI/CD pipelines, Infrastructure as Code (IaC), identity and access management, secrets engines, as well as logging, monitoring, and incident detection/response.
- Vulnerability Management: Spearhead vulnerability identification, triage, and remediation efforts, collaborating with firmware, hardware, cloud, and third-party vendors.
- Incident Response & Forensics: Lead or support security incident management, including the development of runbooks, playbooks, and conducting blameless postmortems.
- Mentor & Grow the Team: Recruit, coach, and mentor security engineers, conduct one-on-one sessions, create career development plans, and foster a culture of ownership and continuous improvement.
- Cross-Functional Partnership: Collaborate with product, firmware, SRE/Ops, QA, and supply chain teams to implement practical security controls and evaluate security outcomes.
