Product Security Engineer

Description

The company builds multi-product defense technology powered by Coherent Distributed Networks (CDN), used by warfighters, commercial air operators, and border protection teams to respond faster and handle changing threats.

Founded in 2022, the company has raised $1 billion from investors including 8VC, Accel, and Valor Equity Partners. It is headquartered in Los Angeles and has offices in Washington, D.C., San Francisco, San Diego, and London.

This is a Cybersecurity Engineer role focused on product security for next-generation sensor platforms and their software. You will support the Senior Product Security Engineer and work with Engineering, Embedded Systems, Infrastructure, and Program teams so security is built in from architecture and development through deployment and ongoing support.

The ideal candidate has secured complex software and hardware in defense, aerospace, or other heavily regulated settings. You will help shape software security architecture, support threat modeling and risk assessments, assist compliance work, and help set secure engineering standards across the company.

The work is collaborative and hands-on, and it directly affects the security and resilience of mission-critical technology used in operational environments.

Responsibilities

• Help design and build secure software and hardware architectures for mission-critical platforms and their supporting infrastructure.
• Work with engineering teams to bring security requirements into each stage of the software development lifecycle (SDLC).
• Run architecture reviews and find security risks across software, embedded, real-time, and hardware systems.
• Write secure design standards, engineering guidance, and product security best practices.
• Support secure development work, including code review, dependency management, secrets management, and fixing vulnerabilities.
• Run threat modeling for software, embedded systems, hardware platforms, and supporting infrastructure.
• Help carry out cybersecurity risk assessments for products, systems, and operational environments.
• Map attack surfaces, define trust boundaries, and close off likely exploitation paths.
• Work with engineers to rank and fix identified security risks.
• Build mitigation plans for cyber threats against deployed systems and sensitive technology.
• Help with compliance and product authorization, including RMF (Risk Management Framework) and ATO (Authority to Operate) work.
• Write system security documentation, security controls, SSPs, and assessment artifacts.
• Support internal and external audits, assessments, and accreditation activities.
• Work with government, customer, and program stakeholders on security requirements and authorization.
• Document security boundaries for both hardware and software.
• Design security testing, including vulnerability assessments, coordination of penetration testing, and checks that fixes work.
• Support secure configuration and hardening across software, operating systems, and embedded environments.
• Review software and system telemetry for security weaknesses or unusual behavior.
• Work with Security Operations and Infrastructure teams to improve security visibility for products and the enterprise.
• Work with Software, Embedded, Hardware, DevSecOps, and Infrastructure teams to balance security, performance, and operational needs.
• Help build scalable product security processes and governance.
• Support customer and internal security reviews of deployed technology and operational environments.
• Advise engineering teams on secure development and security-by-design principles.

Requirements

• At least 2 years in cybersecurity engineering, product security, application security, or a related engineering role.
• Experience with software security design, secure system architecture principles, or both.
• Hands-on experience supporting threat modeling and cybersecurity risk assessments.
• Knowledge of secure software development lifecycle (SSDLC) practices and application security concepts.
• Familiarity with cybersecurity frameworks and compliance standards, including RMF, NIST 800-53, NIST 800-171, and DFARS.
• Experience supporting security authorization, including ATO processes, security documentation, and eMASS management.
• Experience securing embedded systems, sensor platforms, or edge computing technology.
• Knowledge of cryptographic systems, key management systems, and key handling standards.
• Strong analytical, troubleshooting, and technical communication skills.
• Comfort working in a fast-moving startup.
• U.S. citizen eligible to work in government facilities and handle sensitive information.
• Ability to obtain additional security clearances if a contract requires them.
• Preferred: an active security clearance.
• Preferred: experience supporting defense, aerospace, government contracting, or highly regulated technology environments.
• Preferred: firmware security or development experience.
• Preferred: BIOS/UEFI security or development experience.
• Preferred: knowledge of Trusted Platform Module (TPM), secure boot, cryptographic hardware, or supply chain security.
• Preferred: security certifications such as CISSP, CSSLP, GSEC, Security+, or equivalent.

Conditions

The role is onsite (LI-onsite).

The stated compensation range covers base salary only and does not include bonus, equity, or benefits.

Applicants whose pay expectations fall outside the range are still encouraged to apply.

The salary range is an estimate. The actual offer may depend on experience, education, training, critical skills, and business needs.

Benefits

• Medical, dental, and vision benefits, 100% paid by the company.
• 401k with a 50% company match up to 6% of pay, plus FSA, HSA, life insurance, and more.
• Free daily lunch when working onsite, a fully stocked kitchen, unlimited PTO, and a casual dress code.
• Competitive base salary, generous pre-IPO stock option grants, and relocation assistance.
• Annual bonuses are coming soon.
• The company has 500+ employees across 5 global offices.