Foundry Robotics Logo

Foundry Robotics

Head of Security

Posted 2 Months Ago
Be an Early Applicant
In-Office
Emeryville, CA, USA
150K-250K Annually
Entry level
In-Office
Emeryville, CA, USA
150K-250K Annually
Entry level
Own Foundry Robotics’ security and compliance program, including CMMC Level 2 certification, NIST SP 800-171 and DFARS compliance, ITAR/EAR controls, and CUI protection. Lead identity, endpoint, network, cloud, edge, and on-premises security; manage incident response and third-party risk; and build the security roadmap, budget, and team. The role requires hands-on security engineering, facility security expertise, startup leadership, and collaboration across engineering, IT, quality, and operations.
The summary above was generated by AI
About Us

Foundry Robotics is building an AI-native robotics manufacturing company focused on deploying advanced assembly and production capability for leading robotics companies and national-security-critical hardware. Basically, we're building robots that build robots.

We are reimagining manufacturing through advanced robotics. Our mission is to rebuild the American manufacturing industry as an AI-first, assembly-focused, dual-use contract manufacturer. We aim to empower manufacturers with intelligent, efficient, and adaptable robotic systems that redefine productivity and quality. As a founding member of our engineering team, you will have a direct and significant impact on our product, culture, and ultimate success. This role is 100% in-person at our office in Emeryville, CA.

 
The Role

We're hiring our first Head of Security to own the full security and compliance program end to end, from achieving CMMC Level 2 certification ahead of our November 2026 deadline, to building and leading the security function as we grow. You'll be the accountable owner for how Foundry protects Controlled Unclassified Information (CUI), export-controlled technical data, and customer IP across our edge, on-prem, and cloud infrastructure. This is a builder role. You'll set strategy, do hands-on work in the early days, and hire a team behind you.

Key Responsibilities

Government & regulatory compliance

• Drive CMMC Level 2 certification to completion — scoping, SSP/POA&M ownership, evidence collection, and managing the C3PAO assessment (we're already evaluating firms like Schellman, A-LIGN, and CBIZ Pivot Point).

• Own our NIST SP 800-171 / DFARS 252.204-7012 posture and continuous compliance.

• Stand up and administer our ITAR/EAR export-control program — technical data segregation, access controls for

U.S. persons, deemed-export policies.

• Maintain AS9100 and SOC 2 alignment in coordination with quality and operations.

Security engineering & operations

• Own identity, endpoint, and network security across our stack (JumpCloud MDM, CrowdStrike EDR, Google/1Password, Cloudflare, AWS, Tailscale).

• Define and enforce CUI boundary architecture across edge (Jetson/Orin), on-prem (GPU cluster), and cloud (AWS).

• Own our Incident Response Plan and serve in the IRT; run tabletop exercises and lead real incidents.

• Vendor/third-party risk management, including ITAR/CMMC-aware external partner collaborations.

Team & program building

• Build the security roadmap and budget; make build-vs-buy calls decisively.

• Hire, mentor, and lead a security team (GRC, security engineering).

• Partner with engineering, IT, and leadership to make security a default, not a blocker.

What We're Looking For

Founder mentality: We love people who build like it’s their own company. You move fast, take ownership, and find a way through when the path isn’t obvious. You have the drive to make big things happen and the judgment to take smart risks along the way. If you prefer a clearly defined lane, a predictable pace, and all the answers before you start, there’s nothing wrong with that—but Foundry might not be the right fit.

• Understanding of national security facility requirements.

• Previous/current Experience as a Facility Security Officer.

• Proven track record taking an organization through CMMC Level 2 or NIST SP 800-171 assessment ,ideally end to end, at least once.

• Deep, hands-on knowledge of DFARS, CUI handling, and ITAR/EAR export controls.

• Strong security engineering foundation: identity, endpoint, network, and cloud (AWS) security, you can architect and, early on, implement.

• Experience building or scaling a security function at a startup or fast-growing company.

• U.S. person status (required for ITAR-controlled work).

• Comfort operating with high autonomy and ambiguity in a ~30-person startup.

Nice to Have

• SOC 2 and AS9100 experience.

• Manufacturing, defense, aerospace, or hardware-adjacent background.

• Familiarity with securing edge/robotics or ML/GPU infrastructure.

• Relevant certifications (CISSP, CISM, CCP/CCA, etc.).

Why Join Us?

This is one of the only places where world-class manufacturing operators, mechanical engineers, robotics researchers, and software engineers sit in the same room, building production systems together.

We are committed to being deeply embedded in the U.S. industrial base. Our focus is simple: build adaptive robotic assembly systems that make American manufacturing scalable, resilient, and competitive again.

The base salary range for this full-time position in the location of Emeryville is:

$150,000 to $250,000 USD

Compensation packages at Foundry Robotics for eligible roles include base salary, equity, and benefits. The range displayed on each job posting reflects the minimum and maximum target for new hire salaries for the position, determined by work location and additional factors, including job-related skills, experience, interview performance, and relevant education or training. Foundry Robotics employees in eligible roles are also granted equity based compensation, subject to Board of Director approval. You'll also receive benefits including, but not limited to: Comprehensive health, dental and vision coverage, and generous PTO.

Foundry Robotics is an equal opportunity employer. We evaluate all applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or any other protected characteristic.

 

Similar Jobs

7 Days Ago
In-Office or Remote
6 Locations
Entry level
Entry level
Artificial Intelligence • Software • Generative AI
Leads company-wide security architecture and roadmap, identifies systemic risks, and prioritizes remediation. Oversees security across wallet and key management, trading systems, identity and access, software development, and infrastructure. Builds risk assessment, threat detection, and incident response capabilities while advising the CTO on emerging threats, security priorities, and investments.
Top Skills: Identity And Access ManagementIncident ResponseInfrastructure SecuritySoftware Development SecurityThreat DetectionTrading SystemsWallet And Key Management
Junior
eCommerce • Gaming
Lead Riot’s Anti-Cheat Engineering team developing and evolving Vanguard’s Windows client services. Set technical direction, manage and recruit engineers, translate emerging cheat threats into detections and mitigations, and guide investigations involving kernel manipulation, evasive cheats, and compatibility issues. Partner with game, product, operations, and engineering teams to deliver secure, reliable anti-cheat capabilities while balancing security, performance, player experience, and delivery risks.
Top Skills: Client AttestationDkomEpt ManipulationHvciHypervisorsMeasured Boot AttestationObfuscation ToolingReverse EngineeringRuntime Integrity VerificationSecure BootWindowsWindows Driver ModelWindows Kernel
27 Days Ago
In-Office or Remote
United States
200K-250K Annually
Expert/Leader
200K-250K Annually
Expert/Leader
Artificial Intelligence • Blockchain • Information Technology • Consulting
Build and own the company’s enterprise risk management and information security functions. Lead SOC 2 and ISO 27001 compliance, security policies, ISMS development, incident response, business continuity and disaster recovery exercises, vendor and audit management, partner security due diligence, and security awareness training. Collaborate with engineering, product, legal, business development, and operations to maintain an audit-ready security posture.
Top Skills: AWSBlockaidChainalysisDevOpsDrataIaasIsmsIso 27001Soc 2Vanta

What you need to know about the San Francisco Tech Scene

San Francisco and the surrounding Bay Area attracts more startup funding than any other region in the world. Home to Stanford University and UC Berkeley, leading VC firms and several of the world’s most valuable companies, the Bay Area is the place to go for anyone looking to make it big in the tech industry. That said, San Francisco has a lot to offer beyond technology thanks to a thriving art and music scene, excellent food and a short drive to several of the country’s most beautiful recreational areas.

Key Facts About San Francisco Tech

  • Number of Tech Workers: 365,500; 13.9% of overall workforce (2024 CompTIA survey)
  • Major Tech Employers: Google, Apple, Salesforce, Meta
  • Key Industries: Artificial intelligence, cloud computing, fintech, consumer technology, software
  • Funding Landscape: $50.5 billion in venture capital funding in 2024 (Pitchbook)
  • Notable Investors: Sequoia Capital, Andreessen Horowitz, Bessemer Venture Partners, Greylock Partners, Khosla Ventures, Kleiner Perkins
  • Research Centers and Universities: Stanford University; University of California, Berkeley; University of San Francisco; Santa Clara University; Ames Research Center; Center for AI Safety; California Institute for Regenerative Medicine

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account