Senior Security Engineer

Own the security program — from cloud infrastructure to AI agents — at a hardware-meets-software IoT company moving fast.

Luxer One builds and deploys smart locker and access systems across multifamily, commercial, retail, and enterprise markets in North America. An Assa Abloy company, our platform spans cloud infrastructure, mobile applications, IoT firmware, and a live AI operating system — Cortex — with more than twenty deployed autonomous AI agents running real operations across the company. We process millions of transactions annually and are trusted by enterprise customers who take security seriously.

We are not a software company that ships firmware on the side. We are not a hardware company trying to do software. We are both, fully, which makes the security surface broader and more interesting than most.

We have built a lot. Cloud infrastructure running on AWS and GCP. Mobile apps. Embedded firmware on connected locker hardware deployed at thousands of sites. A growing AI operating system with autonomous agents that take real actions against real data. Enterprise customers with real compliance requirements — CCPA, CPRA, ISO 27001 — and a pipeline expanding into Canada and Europe.

What we need is one senior security engineer who owns the whole picture: designs the programs, runs the tools, executes incident response, and is the security authority for our AI systems. Not a team. Not a security analyst to hand off to. You.

If you have been the first or founding security hire somewhere before — or you are ready to be — this is a high-ownership, high-impact seat at a company that is genuinely ahead of most on AI adoption and needs someone who can help keep it that way.

You are a security practitioner who builds programs and runs them. The distinction between "architect" and "operator" is not interesting to you — you do both because both need to get done. You are hands-on with tooling, direct in incident response, and thoughtful in design reviews. You treat engineering teams as partners, not compliance risks to manage.

You are also someone who has thought seriously about AI security — not because it is a trend, but because you understand that LLM-based systems and autonomous agents introduce attack surfaces that traditional security tooling does not cover, and you want to be the person who figures that out in a production environment.

You are probably at a startup or growth-stage company right now — or you have been recently. You have had to make the program work with limited resources, build what did not exist, and be the person engineering leadership calls when something goes wrong. That is the profile.

You are:

A builder who ships — you produce controls libraries, compliance evidence, playbooks, and threat models, not just recommendations

An operator who runs it — SIEM tuning, alert triage, IR execution, vulnerability management with real patching accountability

A product security partner — threat modeling alongside engineers, penetration test coordination, secure SDLC enforcement in CI/CD pipelines

An AI security practitioner — you understand prompt injection, tool abuse, agent identity, and runtime monitoring for autonomous systems; you can design the guardrails and detect when they fail

Low ego, high ownership — you take the 3am call, you close the finding, you write the post-mortem

And you bring:

• A track record at startup or growth-stage companies — you have operated where security is lean and the surface area is large
• Experience as the founding or first dedicated security hire somewhere, or effectively functioning as one
• Hands-on depth across IT security and product/application security in the same role
• Real AI or LLM security experience:…