Senior Corporate Security Engineer

At Walden Robotics, we envision a world where general-purpose robots dramatically improve the quality of life for all people—supporting us at home, at work, in factories, on farms, and beyond. To accomplish this, we are building a team of exceptional professionals who combine world-class technical skills with creative vision, grounded in humility and collaboration.

Position Summary:

We're looking for a Senior Corporate Security Engineer to be our first dedicated information security hire. Reporting to the Head of IT & Infrastructure, you will run the day-to-day operation of our corporate security program: compliance and audit readiness, security operations and incident response, vulnerability management, security assessments, and the security awareness program. This is a hands-on execution role with real program ownership and latitude to choose tooling, write policy, and shape how the function runs day to day. We're looking for someone who can move between writing a detection rule in the morning and walking an auditor through evidence in the afternoon.

Expectations:

In this role, you are expected to:

Own complex work end-to-end, including cross-functional efforts. You take a program area from ambiguous problem to operating outcome — scoping, sequencing, and driving it across IT, engineering, and leadership without needing the path defined for you.

Act as the subject-matter expert and communicate clearly across the org. You are the go-to authority on security at Walden Robotics, and you translate risk and technical findings into decisions that non-technical stakeholders and leadership can act on.

Mentor teammates and raise the quality bar. You set standards for how security work is done here and lift the people around you — reviewing others' work, sharing judgment, and improving how the whole team operates.

Align your work to Walden Robotics' broader mission. You connect security decisions to company goals and make pragmatic trade-offs that move the business forward rather than applying controls for their own sake. You will work closely with the Product Security Engineer to ensure that corporate and product security initiatives are complimentary and aligned.

Core Responsibilities:

Security Operations, Incident Response & Vulnerability Management

Own the day-to-day operation of our CrowdStrike Falcon stack, including the Next-Gen SIEM, EDR policy, detections, and integrations.

Triage alerts, tune detection content, and reduce noise; develop runbooks for the most common alert classes.

Serve as the lead technical responder for security incidents: investigate, execute containment, coordinate the technical response across IT and engineering, and write the post-incident report, working closely with the Head of IT on incident command and org-wide coordination.

Serve as the primary point of contact for CrowdStrike's managed services and incident response team, directing their day-to-day engagement.

Plan and run periodic tabletop exercises with IT, engineering, and leadership; capture and close gaps.

Run the vulnerability management program day to day — scanning cadence, patch coordination, exception tracking — across corporate endpoints, SaaS applications, and identity systems.

Bring prioritized findings and risk-based recommendations to the Head of IT for final sign-off.

Security Assessments & Technical Risk

Run vendor and SaaS third-party security assessments end-to-end — intake, technical review, findings — and bring a clear recommendation to the Head of IT for final sign-off.

Maintain the third-party risk inventory and coordinate annual re-reviews of critical vendors.

Perform technical security reviews of internal systems and configurations, including identity, network, cloud, and endpoint configurations.

Partner with engineering on threat modeling for new product and platform work; provide pragmatic, actionable findings rather than blocking checklists.

Lead threat modeling for corporate IT systems and infrastructure changes — model the environment, prioritize risks, and drive mitigation with IT and engineering owners.

Implement and maintain the corporate AWS account's IAM baseline, logging, and hardening day to day, working with the Head of IT to set and evolve the target posture.

Own security review and risk management for corporate AI usage — SaaS AI feature adoption, employee AI tool usage — including practical guidance for safe adoption.

Compliance, Risk & Audit Readiness

Own day-to-day execution of our SOC 2 compliance program for our corporate systems.

Draft and maintain security policies, standards, and procedures, and work with control owners to get them adopted.

Track control evidence collection, gap remediation, and audit readiness; serve as the operational counterpart to our auditors and external GRC consultants.

Track and report on policy compliance across the fleet, including MDM enrollment, EDR coverage, patch state, encryption, and identity hygiene; drive remediation with IT and engineering owners.

Maintain the risk register and run periodic risk reviews; bring trends and mitigation recommendations to the Head of IT.

Security Awareness & Enablement

Build and run the security awareness program: new-hire onboarding security training, annual refreshers, and targeted training (phishing, data handling, secure development practices).

Run phishing simulations and use results to inform training and process changes.

Maintain user-facing security documentation and self-service guidance; treat training as a product to be improved based on feedback and outcomes.

Vendor & Consultant Coordination

Direct day-to-day work with our existing external information security consultants across strategy, audit preparation, and offensive testing; assign work, review deliverables, and integrate findings into the program.

Manage relationships with security tooling vendors: licensing, support escalations, and renewals.

Escalate scope, performance, or budget concerns to the Head of IT.

Required Qualifications:

5+ years in information security with progressive responsibility, including hands-on operational work and program ownership.

Demonstrated experience preparing for or maintaining a SOC 2 program in a growing organization, including evidence collection, control design, and working with external auditors.

Hands-on experience with an EDR platform (CrowdStrike, SentinelOne, Microsoft Defender for Endpoint, or similar), including policy tuning and detection content.

Hands-on experience with a SIEM or modern logging/detection platform, including writing or tuning detection rules and triaging alerts end-to-end.

Experience leading the response to security incidents end-to-end, from investigation through post-incident review.