Senior Director of Product Security

Apptronik is a human-centered robotics company developing AI-powered robots to support humanity in every facet of life. Our flagship humanoid robot, Apollo, is built to collaborate thoughtfully with people, starting with critical industries such as manufacturing and logistics, with future applications in healthcare, the home, and beyond. We operate at the cutting edge of Applied AI, applying our expertise across the full robotics stack to solve some of society's most important problems. You will join a team dedicated to bringing Apollo to market at scale, tackling the complex challenges like safety, commercialization, and mass production to change the world for the better. About Apptronik Apptronik is building Apollo, a general-purpose humanoid robot designed to work alongside people in real-world environments. We sit at the intersection of advanced hardware, embedded systems, and AI while scaling from development into deployment. As Apollo moves into the field, product security is a foundational requirement across everything we ship. Vulnerabilities here are not abstract: they have real-world consequences. The Role We are looking for a Senior Director of Product Security to own and drive Apptronik's end-to-end product security function. Reporting directly to the COO, you will have cross-functional authority across hardware engineering, software, systems engineering, and external partnerships. You will build the program from the ground up — establishing monitoring infrastructure, defining escalation protocols, and embedding security requirements into how Apollo is designed, built, and deployed. This is not a traditional IT or enterprise security role. You will be operating in a physical-AI product context with a distinct mandate from the CIO, who owns enterprise and corporate security. What You Will Do Program Leadership • Own Apptronik's product security strategy and roadmap, aligned to product and operational milestones • Build and lead a product security team — hiring, mentoring, and defining org structure as the function grows • Serve as the primary security voice to the COO and executive team, communicating risk posture, program status, and resource needs clearly • Develop a product security charter that defines boundaries and working relationships with T&V, Systems Engineering, and the CIO Monitoring & Threat Detection • Design and deploy monitoring frameworks for Apollo in both development and production/field environments — covering firmware, runtime behaviors, communications, and physical interfaces • Define telemetry and alerting requirements that enable early detection of anomalous behavior, unauthorized access attempts, or integrity violations • Establish continuous security testing pipelines integrated into hardware and software development cycles, in coordination with T&V Escalation & Incident Response • Build and own the product security escalation framework: from initial detection through triage, containment, customer notification, and remediation • Define severity classifications, response SLAs, and communication protocols for security events affecting deployed units or customer environments • Lead tabletop exercises and red team efforts to stress-test escalation paths before incidents occur Hardware & Software Security Requirements • Translate security principles into concrete, actionable requirements for hardware and software — covering secure boot chains, SoC and enclave security, physical attack surfaces, OS hardening, AI model integrity, OTA update security, and inter-process communication • Partner with HW, SW, and AI/ML engineering leads to review architectures early and drive security-by-design practices • Own the security review and sign-off process for new product features, third-party integrations, and software releases • Work with Systems Engineering to ensure security requirements are properly integrated into the requirements flow-down process Supply Chain & Vendor Security • Assess security posture of hardware component suppliers, contract manufacturers, and third-party software vendors • Define contractual and technical security requirements for suppliers and AI stack partners — including foundation model providers, cloud platforms, and data pipeline vendors • Evaluate data ownership implications of robotics foundation model partnerships OTA Update Security • Own the security architecture for Apollo's over-the-air update mechanism — one of the highest-consequence attack surfaces on a deployed physical robot • Define requirements for update integrity verification, rollback protection, and secure delivery infrastructure Physical Security & Anti-Tamper • Define tamper resistance requirements and anti-cloning protections for deployed units • Protect Apptronik IP embedded in hardware and firmware from extraction or reverse engineering in the field Regulatory & Export Control Awareness • Anticipate and track evolving regulatory requirements relevant to humanoid robotics — including ITAR, EAR, and emerging AI/robotics regulations • Advise on security implications of government, defense-adjacent, and international customer engagements Data Governance & Privacy • Own the security posture around Apollo's operational and environmental data pipeline — from the robot through to cloud storage and analytics • Partner with the CIO on data governance frameworks where product and enterprise data intersect Customer Security Enablement • Help enterprise customers integrate Apollo into their security environments — including SOC integration, access controls, and audit log requirements • Serve as the primary security point of contact for customer security reviews and due diligence processes • Establish a structured vulnerability disclosure and bug bounty program as Apollo scales What We're Looking For • 12+ years in security engineering or product security, with 5+ years leading security organizations — including experience managing managers, owning budget, and defining team structure • Demonstrated experience defining and building a security discipline in an emerging hardware or physical-AI domain — where the threat model, requirements, and processes did not exist before you arrived • Deep experience securing embedded systems, robotics, autonomous vehicles, or other physical-AI products — you understand that software vulnerabilities here can have kinetic consequences • Hands-on expertise across the stack: secure boot, firmware security, cryptographic key management, network and communication security, and application-layer threats • Strong background building security monitoring and incident response programs in production hardware environments • Track record of translating security risk into product and engineering requirements that teams actually ship — and the organizational credibility to enforce them • Experience with supply chain security assessments and third-party vendor risk management • Familiarity with OTA update security architecture and the risks unique to field-deployed hardware • Working knowledge of relevant regulatory frameworks: ITAR, EAR, IEC 62443, NIST, OWASP, CWE • Excellent communication skills — you can present to the C-suite, debate trade-offs with a systems architect, and write crisp requirements for an embedded engineer Why This Role You will define how Apptronik thinks about security as we scale — setting the bar for an industry that is still determining what secure humanoid robotics means. You will have direct COO support, real cross-functional authority, and the opportunity to build a program from scratch at a company shipping real hardware into the real world. Apptronik · Austin, TX · apptronik.com *This is a direct hire. Please, no outside Agency solicitations. Apptronik provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.