> Markdown version of [/jobs/ext/2722520-sr-cloud-mobile-security-engineer](https://www.wearedevelopers.com/jobs/ext/2722520-sr-cloud-mobile-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Sr. Cloud & Mobile Security Engineer - **Company:** iRobot - **Location:** Bedford, United States - **Experience:** Expert - **Salary:** $107,000.0 - $152,500.0 - **Contract:** Permanent contract - **Skills:** Microsoft Access, JavaScript (Programming Language), Artificial Intelligence, Amazon Web Services, Apple IOS, Software System Penetration Testing, Authentication Protocols, Automation of Tests, Cloud Computing, Identity and Access Management, Mobile Application Software, Python (Programming Language), Node.Js, OAuth, Open Web Application Security, Role-Based Access Control, Cloud Services, Red Team (Cyber Security), Single Sign-On, Software Security, Build Management, AI Platforms, Integration Tests, Api Design, Serverless Computing, Static Application Security Testing, Dynamic Application Security Testing - **Published:** September 4, 2026 - **Apply:** https://startup.jobs/sr-cloud-mobile-security-engineer-irobot-corporation-8757414 ## About the Role * 7+ years designing, building, and deploying AWS-based managed service infrastructure, with at least 2 years as a security champion within a development team * Extensive knowledge and practical experience designing, building and deploying secure serverless, API-based services with a deep understanding of the standard callflow of managed service architecture: Gateway to Work Process to Storage to Access * Deep knowledge of authentication protocols and technologies, including IAM, SSO, OAuth 2.0, and RBAC * Experience building mobile apps for iOS and Android, with a deep understanding of the security best practices of each * Understanding of, and alignment with, OWASP standards and best practices, including the OWASP Top Ten lists * Strong understanding of AWS policy hierarchy, and practical knowledge of Organizations, SCPs, IAM, et al * Python and Node/ JavaScript proficiency * Practical experience constructing architecture risk assessments and leveraging standard security tooling to build empirical evidence in support of those assessments * Preferred: experience at a consumer product company Applicants must be authorized to work for any employer in the U.S. We are unable to sponsor or assume sponsorship of any additional employment visas at this time. ## Description iRobot is in immediate need of a Senior Engineer on its Product Security team who is experienced in applying security best practices and principles to the design, development, and maintenance of AWS Managed Service architecture, and to the mobile applications written for the most common platforms and languages. iRobot leads the market in consumer robotics and enabling the smart home, and the cloud infrastructure underpins its millions of connected robots, while the mobile application connects our millions of customers to their robot devices. The responsibilities will require a mix of partnering with development teams to assess new designs for potential security issues, and designing and building centralized security services, test frameworks, and integrated testing tools for use in automated build pipelines. What You Will Do: * Assess new cloud designs and mobile app feature changes for potential security vulnerabilities. * Evaluate production and test builds of cloud services and mobile applications for adherence to security best practices. * Develop guidelines for security of products based on industry standards. * Triage reported vulnerabilities from the field across a spectrum of sources and determine impact, priority, and risk. * Design and build secure cloud services that centralize critical security functionality. * Implement test frameworks for automated security validation testing of cloud and mobile deployments. * Work with the latest SAST/DAST tooling, AI-powered and traditional, to evaluate and report on flaws and vulnerabilities to the development teams. * Ensure the components meet the regulatory needs of every market within which iRobot products are sold. * Engage third-party and AI services for penetration testing, red team exercises, threat modeling, and more. ## Related Videos - [Robots are coming into the wild! Full-Stack Robotics Engineers, be ready!](https://www.wearedevelopers.com/videos/479-robots-are-coming-into-the-wild-full-stack-robotics-engineers-be-ready) - [Xcode development redefAIned](https://www.wearedevelopers.com/videos/100195-xcode-development-redefained) - [Stop using Node.js like in 2020! What changed and what you can do today with Node.js](https://www.wearedevelopers.com/videos/100011-stop-using-node-js-like-in-2020-what-changed-and-what-you-can-do-today-with-node-js) - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Remote Driving on Plant Grounds with State-of-the-Art Cloud Technologies](https://www.wearedevelopers.com/videos/251-remote-driving-on-plant-grounds-with-state-of-the-art-cloud-technologies) - [Harnessing Apple Intelligence: Live Coding with Swift for iOS](https://www.wearedevelopers.com/videos/1515-harnessing-apple-intelligence-live-coding-with-swift-for-ios) ## Related Articles - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Dev Digest 137 - AI'm not sure about this](https://www.wearedevelopers.com/magazine/485-dev-digest-137-ai-m-not-sure-about-this) - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers) - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)