{"id":1270701,"url":"https://alion.io/job/humanoid-principal-product-cybersecurity-assurance-engineer-2","title":"Principal Product Cybersecurity Assurance Engineer","company":{"id":35230,"name":"Humanoid","domain":"thehumanoid.ai","url":"https://alion.io/company/thehumanoid","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":75,"open_postings":13,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":56,"computed_at":"2026-11-04T06:34:25Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Boston, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":143000,"max_usd":294000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":453},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"ISO 27001","optional":false},{"name":"STRIDE","optional":false},{"name":"Vision-Language-Action","optional":false},{"name":"VLM","optional":false}],"status":"live","first_seen_at":"2026-09-25T19:18:26Z","employer_posted_date":"2026-09-25","last_verified_at":"2026-11-04T22:19:45Z","board_verified":true,"closed_at":null,"days_open":40,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":40},"description":"Here at Humanoid, we believe in a future where robots amplify human potential. That’s why we’ve set out on a mission to build the world’s most capable, commercially-scalable, and safe humanoid robots. We’re bringing that mission to life with HMND-01 - our rapidly developed humanoid platform being deployed in real industrial environments - and we’re growing the team to take it even further.\nAbout the Role\nWe are seeking a Principal Product Cybersecurity Assurance Engineer with deep expertise in product security, threat modelling, and risk assurance for highly regulated electromechanical systems. In this role, you will lead the delivery of product cybersecurity across Humanoid's HMND 01 platform family - the Alpha Wheeled industrial robot and the Alpha Bipedal home robot - both powered by our KinetIQ VLM/VLA-based AI framework. Working alongside product, firmware, autonomy, and hardware teams as part of the Systems Engineering and Architecture Team, you will define and maintain the cybersecurity assurance strategy for all product security activities from first concept through post-market deployment. Security at Humanoid is an engineering discipline inseparable from functional safety and central to our mission of creating the world's most reliable, commercially scalable, and safe humanoid robots. To excel in this position, you must demonstrate the authority to influence security architecture decisions across complex, cross-functional programmes, the rigour to build defensible security cases for novel cyber-physical systems, and the leadership to grow and guide a cross team of security engineers operating at the frontier of robotics.\nWhat You'll Do\nTeam Leadership & Product Security Delivery\nLead and develop a cross-functional team of security engineers, maintaining accountability for the delivery of product security services within product teams throughout the HMND 01 development lifecycle.\n\nDefine product security requirements and advise development teams on suitable implementation standards, techniques, and toolchains for embedded and AI-enabled robotic systems.\n\nPartner with cross-functional teams to develop security protocols, tools, and processes that keep HMND 01 technologies ahead of emerging threats - including attack surfaces specific to the KinetIQ AI inference pipeline and cloud-to-robot communication architecture.\n\nOwn and maintain key security artefacts for audit-ready cybersecurity documentation including Security Management Plans, Threat Analysis and Risk Assessment (TARA) reports, Risk Assessments, and Remediation Action Plans across both platforms.\n\nSecurity Assurance & Certification\nDrive security assurance through the full product lifecycle, ensuring every HMND 01 design is robust, compliant, and resilient. Contribute to the continual improvement of security engineering capability across the organisation.\n\nEnsure compliance with cybersecurity obligations under the EU Machinery Regulation 2023/1230 where cyber controls intersect with safety-critical functions and compliance to IEC 62443 (for industrial/OT product security), and the EU Cyber Resilience Act.\n\nProvide independent Information Assurance (IA) reviews and risk assessments on complex, high-impact projects - with particular focus on cyber-physical systems where a digital compromise could result in physical harm to operators or end users.\n\nReview and provide guidance on security risk assessments, risk mitigation plans, mitigation gap analysis, and security management documentation in support of system cybersecurity certification.\n\nIncident Response & Lifecycle Security\nEstablish and maintain a Product Security Incident Response (PSIR) process, encompassing coordinated vulnerability disclosure, patch deployment pipelines, and post-field incident analysis.\n\nDefine and oversee security monitoring requirements for deployed fleets, ensuring field data feeds back into risk files and security artefacts in line with post-market surveillance obligations.\n\nCommercial & Bid Support\nSupport the production of work package descriptions and cost estimates for product bids, services, and proposals that include product security scope.\n\nRepresent Humanoid's security posture in customer and partner engagements, including regulatory consultations and certification body interactions.\n\nWhat We're Looking For\nProven, hands-on experience with ISO 27001/27004/27005 and the NIST Risk Management Framework (RMF), applied to regulated hardware or embedded product programmes.\n\nExperience owning a security risk management system for highly regulated, safety-critical products - with background drawn from automotive, commercial vehicle, or industrial automation environments.\n\nWorking knowledge of IEC 62443, with the ability to adapt ISO/SAE 21434 lifecycle methodologies to robotic or electromechanical product context.\n\nSolid understanding of engineering development lifecycles and how the product cybersecurity specialism aligns with systems engineering, functional safety, and hardware/software co-development.\n\nAbility to interpret Penetration Test reports and author Remediation Action Plans that address identified vulnerabilities in a structured, risk-prioritised manner.\n\nClear, structured communication skills - able to articulate complex security risk arguments to both technical engineers and executive stakeholders with equal confidence.\n\nPreferred:\nFamiliarity with Threat Analysis and Risk Assessment (TARA) or equivalent threat modelling methodologies (STRIDE, PASTA) applied to embedded or OT/IT convergent systems.\n\nUnderstanding of secure-by-design principles for AI/ML-enabled systems, including securing inference pipelines, model integrity, and cloud-to-edge communication paths.\n\nExposure to CAN bus, Ethernet backbone, or wireless interface security in mobile, vehicular, or robotic systems.\n\nExperience contributing to or establishing a Product Security Incident Response (PSIRT) process or coordinated vulnerability disclosure programme.\n\nKnowledge of UL 4600, UL 3300, or ISO 13482 and an appreciation of how cybersecurity evidence integrates into safety case arguments.\n\nPrior engagement with certification bodies (TUV, UL, BSI) or standards development organisations (ISO TC 184, IEC TC 65, SAE, IEEE RAS).\n\nWhat We Offer\nComprehensive health coverage for US-based employees, including fully paid medical, dental, and vision insurance, with virtual care and employee assistance resources.\n\nMeaningful time off to rest and recharge: 23 days of PTO (accrued), separate sick leave, and paid company holidays.\n\n401(k) retirement plan with 4% employer match.\n\nCompetitive equity: stock options with meaningful upside as we scale.\n\nFree daily catered lunch, snacks, and drinks in-office.\n\nCollaboration with top-tier engineers, researchers, and product experts in AI and robotics.\n\nFreedom to influence the product and own key initiatives.","description_format":"text","description_chars":6889,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Retirement plans","Stock options","Vision insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Logistics & Warehouse Robotics","Industrial Robotics"],"lifecycle":[{"event":"open","at":"2026-09-25T23:57:47Z"}],"visa":[],"liveness":{"score":45,"band":"ok","label":"Likely open","p_open":1,"p_active":0.606,"p_room":0.75,"age_days":39,"expected_fill_days":56,"reasons":["conf:3","stale_co","velocity","win:late"],"computed_at":"2026-11-04T06:34:25Z"},"pay":null,"html_url":"https://alion.io/job/humanoid-principal-product-cybersecurity-assurance-engineer-2","json_url":"https://alion.io/job/humanoid-principal-product-cybersecurity-assurance-engineer-2.json","meta":{"generated_at":"2026-11-05T02:44:01Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3585,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-06T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":35230},"rest":"https://alion.io/mcp/rest/get_company?id=35230"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fhumanoid-principal-product-cybersecurity-assurance-engineer-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fhumanoid-principal-product-cybersecurity-assurance-engineer-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fhumanoid-principal-product-cybersecurity-assurance-engineer-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/humanoid-principal-product-cybersecurity-assurance-engineer-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fhumanoid-principal-product-cybersecurity-assurance-engineer-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":1270701}},{"tool":"search_jobs","arguments":{"company":"thehumanoid.ai","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":1270701},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}