Head Of Security
US$150,000 – US$250,000 / yr base salary
Posted 19 Aug 2026
Advertised as “Head of Security”
BranchFactor Summary
The original posting with the fluff stripped out
- Management level
- People management
- Employment
- On-Site
- Contract
- Full-time
| Base salary | US$150,000 – US$250,000 / yr |
|---|
CertificationsCISSP, CISM, CCP, CCA
About Us
Foundry Robotics is building an AI-native robotics manufacturing company focused on deploying advanced assembly and production capability for leading robotics companies and national-security-critical hardware. Basically, we're building robots that build robots.
We are reimagining manufacturing through advanced robotics. Our mission is to rebuild the American manufacturing industry as an AI-first, assembly-focused, dual-use contract manufacturer. We aim to empower manufacturers with intelligent, efficient, and adaptable robotic systems that redefine productivity and quality. As a founding member of our engineering team, you will have a direct and significant impact on our product, culture, and ultimate success. This role is 100% in-person at our office in Emeryville, CA.
The Role
We're hiring our first Head of Security to own the full security and compliance program end to end, from achieving CMMC Level 2 certification ahead of our November 2026 deadline, to building and leading the security function as we grow. You'll be the accountable owner for how Foundry protects Controlled Unclassified Information (CUI), export-controlled technical data, and customer IP across our edge, on-prem, and cloud infrastructure. This is a builder role. You'll set strategy, do hands-on work in the early days, and hire a team behind you.
Key Responsibilities
Government & regulatory compliance
• Drive CMMC Level 2 certification to completion — scoping, SSP/POA&M ownership, evidence collection, and managing the C3PAO assessment (we're already evaluating firms like Schellman, A-LIGN, and CBIZ Pivot Point).
• Own our NIST SP 800-171 / DFARS 252.204-7012 posture and continuous compliance.
• Stand up and administer our ITAR/EAR export-control program — technical data segregation, access controls for
U.S. persons, deemed-export policies.
• Maintain AS9100 and SOC 2 alignment in coordination with quality and operations.
Security engineering & operations
• Own identity, endpoint, and network security across our stack (JumpCloud MDM, CrowdStrike EDR, Google/1Password, Cloudflare, AWS, Tailscale).
• Define and enforce CUI boundary architecture across edge (Jetson/Orin), on-prem (GPU cluster), and cloud (AWS).
• Own our Incident Response Plan and serve in the IRT; run tabletop exercises and lead real incidents.
• Vendor/third-party risk management, including ITAR/CMMC-aware external partner collaborations.
Team & program building
• Build the security roadmap and budget; make build-vs-buy calls decisively.