Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 144 days ago

Infrastructure Security Engineer

Skip8 open roles

Where
San Francisco
Work mode
Hybrid
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowInfrastructure Security EngineerSkip · San Francisco

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Skip's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.8% of postings close within 7 days. Measured by our own scanner across the market. Skip postings stay open a median of 46 days.

Share of postings closed within
  1. 2.2%1 day
  2. 4.5%3 days
  3. 12.8%7 days
  4. 20.6%14 days
  5. 35.6%30 days
  6. 58.4%60 days
This job: posted 144 days ago

Skip median: 46 days open

The posting

ABOUT US:

Skip is on a mission to make life joyful through powered movement.

Movement is a powerful way to build physical, mental and social health. Yet it is elusive for 2 billion people due to age, injury, or disability. We are building products that will restore mobility for millions and enable a new frontier of joyful movement experiences. We want to build a future where a grandparent can easily outrun their grandkids and no one is left behind at the trailhead.

Skip is a 24-person early-stage start-up that spun out of Google X in 2023. With deep cross-disciplinary expertise and key partnerships (e.g. with Arc’teryx) we are uniquely positioned to launch the first commercially successful wearable robotic device, the MO/GO, develop a platform to launch future Movewear products and transform millions of lives in the coming years.

THE ROLE:

We are seeking a highly motivated and adaptable engineer to own the infrastructure and security foundation that a fleet of wearable robots depends on. This means hardening our cloud and device infrastructure from the ground up, and building the PKI and device identity systems that let us ship trusted firmware to thousands of MO/GOs in customers' homes -- safely, verifiably, and at scale.

You'll work closely with our backend and firmware engineers as a core member of our small software team. There's no security org above you, no dedicated platform team below you. You'll be writing the playbook.

Some of the specific responsibilities include, but are not limited to:

- Design and operate Skip's PKI infrastructure -- device certificate provisioning, certificate authority management, key lifecycle management, and revocation -- across our device fleet and cloud services

- Own device identity and secure boot: ensure every MO/GO that leaves our factory is cryptographically authenticated and that firmware updates can only come from Skip

- Harden our GCP infrastructure across networking, IAM, secrets management, and data isolation between Dev and Prod environments

- Build and maintain security tooling for secrets management, vulnerability scanning, dependency auditing, and incident detection

- Define and implement secure OTA (over-the-air) update pipelines that ensure firmware integrity from signing through delivery to device

- Automate infrastructure provisioning and security configuration using Terraform and GCP-native tooling

- Partner with firmware engineers to define embedded security requirements -- secure element usage, TrustZone, attestation -- and ensure cloud-side infrastructure meets them

- Contribute to compliance readiness as we approach regulated market entry, including audit logging, access controls, and data handling practices

- Wear prototypes several hours a week to participate in data collection, test new builds, and provide feedback

- Bring joy to the team, participate in embarrassing team events, tolerate KZ's terrible music choices

Basic Qualifications

- 6+ years of experience in infrastructure engineering, platform security, or a combined DevSecOps role

- Hands-on experience designing and operating PKI systems: CA hierarchies, certificate provisioning at scale, key management, and revocation

- Strong GCP or equivalent cloud infrastructure experience (IAM, VPC, Secret Manager, Cloud KMS, audit logging)

- Experience with Infrastructure as Code (Terraform or equivalent)

- Solid understanding of TLS, mTLS, code signing, and secure boot concepts in the context of connected devices or IoT

- Experience with CI/CD security: signing pipelines, artifact attestation, secrets hygiene

- Able to operate independently in a fast-paced environment where the security playbook is still being written

- Ability to relocate to work at the Skip Bay Area office

- Sense of humour, tolerant of Aussie & Canadian spelling

Bonus Points

- Experience securing IoT or embedded device fleets at scale, including OTA update security

- Familiarity with embedded security primitives: secure elements, TrustZone, TPM, or hardware attestation

- Background in compliance frameworks relevant to connected medical or consumer devices (SOC 2, ISO 27001, FDA cybersecurity guidance)

- Experience with BLE security and wireless protocol hardening

- Experience in start-up environments

- Personal motivation to improve human movement

This is a full time hybrid position working at the Skip office in the Dogpatch neighborhood of San Francisco.

Skip is an equal opportunity employer. Our hiring decisions are based on need and competence to satisfy said need. We do not discriminate on the basis of race, religion, color, gender, sexual orientation, gender identity, age, marital status, veteran status, disability status, or any other legally protected status.

Any and all offers of employment extended by Skip are conditional on candidates’ ability to provide satisfactory proof of eligibility to maintain full-time employment in the United States.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Skip's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Skip's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Skip's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.