I’m hiring security engineers to join me at Factory, and you should apply!

Factory is an exceptional place to work. The team is brilliant, customers love the product, and we’re growing quickly. We’re also early enough that new hires will have real influence over what we build and how our security program develops.

Whether your strengths are in pentesting, application and product security, cloud security, corporate security, or compliance, I’d like to hear from you! I’m looking for people who care deeply about their craft and want the freedom to shape their role around where they can have the greatest impact.

Here’s the general job description: factory.com/careers/s…

Treat the listed qualifications as guidelines, not a checklist. If you bring different strengths, I want to hear about them!

Onsite in San Francisco.

Factory raises $200M at $5B valuation | Factory.ai:

Factory gives enterprises control over how their software factory learns, which models it uses, and where it runs, whether deployed in the cloud, on-premises, or in fully air-gapped environments.

I’m at an amazing company with cool products and astonishingly brilliant coworkers, and it’s taking off like a rocket. Building neat things is great. Having customers lining up to buy them is even better. This is the most excitement I’ve felt in my career.

My team at Factory’s growing (FTE, onsite in San Francisco). Come work with me to beef up 1) our security stance, and 2) our IT program. We’re growing rapidly and I want to get ahead of scaling issues. You’ll work directly with me, with agency to define and evolve your own role. Today we need hands-on-keyboard IC work. Want to grow that into a director-level role? This is the time to join.

Security Engineer: factory.ai/careers/s…

IT Operations Specialist: factory.ai/careers/i…

Why yes, you can run Factory’s Droid on a Raspberry Pi. Not officially, sure. This isn’t part of our CI/CD pipeline and we’re not publishing packages for it the way we do for our supported platforms. Still, it works!

Today was my 1 year anniversary as Head of Security at Factory. Quickest year of my life, and I still love coming to work every day. My coworkers are amazing!

Today I used our Droid AI to analyze a vendor’s security questionnaire response. It was one of the best experiments I’ve tried so far. I wrote:

We’re considering a new vendor, Foo Corp. I’ve described what they do in “foocorp-description.md”. I sent them a security questionnaire (“Questionnaire.doc”) and asked them to fill it out. All the other files here are their response.

Given the sensitivity of their service, does their reply seem adequate? Did they thoroughly complete their response to our questionnaire (“foocorp-response.txt”) and does it completely answer all the questions we sent to them? Are there any glaring gaps? Do their other documents support their answers?

Droid replied shortly with a detailed response identifying both the good parts and the areas of concern. It added an executive summary and a detailed list of suggestions to discuss with the vendor.

I double-checked Droid’s findings for accuracy and deleted some that didn’t seem terribly important. Then I wrote my own recommendations in my own words. It’s my job to apply my own judgment to the available information to make decisions, and I’m not oursourcing that judgment to an LLM. The AI didn’t do my job for me. Still, it saved me about a day’s worth of clerical work and made an onerous chore a lot more interesting.

I don’t ever plan to do a vendor review completely by hand again if I can help it.