Note: The job is a remote job and is open to candidates in USA. Crux Security is a comprehensive cybersecurity firm that blends GRC SaaS solutions with high-touch security services. As an Application Security Engineer, you will spearhead the security of software applications, designing robust defenses against vulnerabilities and collaborating with various teams to ensure the security of application layers.
Responsibilities
- Develop and enforce secure coding standards for humanoid robotics applications (e.g., real-time control GUIs, teleoperation apps, behavior scripting tools), integrating protections like input sanitization, multi-factor authentication, and secure session handling
- Conduct threat modeling to pinpoint and neutralize risks—such as SQL injection in telemetry dashboards, XSS in user portals, or API abuse in command interfaces—specific to humanoid robot interactions
- Secure RESTful APIs, GraphQL endpoints, and cloud integrations that enable robot-to-cloud communication, implementing OAuth 2.0, JWT, and TLS 1.3 to protect data flows like motion telemetry or voice commands
- Partner with software developers to embed security throughout the SDLC, deploying SAST, DAST, and SCA to catch vulnerabilities and third-party risks early
- Work with cloud engineers to harden IaC, Kubernetes clusters, and OTA pipelines delivering behavior updates to robots
- Collaborate with embedded security engineers to ensure secure handoffs between app-layer controls and firmware
- Coordinate with AI/ML teams to protect inference endpoints against data poisoning or model inversion
- Lead rigorous testing with SAST (static analysis), DAST (dynamic testing), and SCA (dependency scanning) tools; conduct penetration tests (e.g., exploiting API rate limits) and integrate automated security gates into CI/CD pipelines (e.g., GitLab CI, Jenkins)
- Drive rapid response to app-layer breaches—like compromised user portals or OTA hijacking—working cross-functionally to contain, mitigate, and log incidents with tools
- Align security with OWASP Top 10, NIST 800-53, and robotics-specific regs, ensuring audit-ready systems
- Explore advanced app security paradigms to future-proof our humanoid robots against evolving threats
Skills
- 4–6+ years in application security, software engineering, or DevSecOps, ideally in humanoid robotics, IoT, or real-time systems
- Demonstrated success securing web, mobile, or cloud apps in production, with hands-on SAST/DAST/SCA experience
- Expertise in secure coding with Python, Java, or Go; familiarity with C/C++ for ROS integration a plus
- Mastery of security tools: SAST, DAST, & SCA
- Strong grasp of API security, encryption, and cloud platforms
- Proficiency with CI/CD and container security
- Experience with robotics frameworks like ROS/ROS 2 for app-to-robot communication a plus
- Bachelor's degree in Computer Science, Cybersecurity, or related field
- Skilled at partnering with software, cloud, embedded, and AI teams, driving security consensus in a robotics context
- Startup-savvy—proactive, innovative, and passionate about securing humanoid robotics applications
- Master's or certs like CSSLP, GWAPT
- Background in securing human-robot interfaces (e.g., gesture UIs, voice controls)
- Experience with AI-driven app security or real-time teleoperation systems
Company Overview