Senior Cybersecurity Engineer, Product Security

Description

The company builds products for defense, using its Coherent Distributed Networks platform to help warfighters, commercial air operators, and border protection teams respond faster and handle changing threats.

Founded in 2022, the company has raised $1 billion from investors including 8VC, Accel, and Valor Equity Partners. It is headquartered in Los Angeles and has offices in Washington, D.C., San Francisco, San Diego, and London.

You will help design, assess, and secure the company's next-generation sensor platforms and the software around them. You will work with software, embedded, hardware, infrastructure, and program teams so security is built in from architecture and development through deployment and ongoing support.

The right candidate has secured complex software and hardware in defense, aerospace, or other tightly regulated settings. You will lead software security architecture, run threat models and risk assessments, support compliance work, and help set secure engineering standards across the company.

The work is hands-on and collaborative, and it directly affects the security and resilience of mission-critical technology used in operational environments.

The company has over 500 employees across 5 global offices.

Responsibilities

• Design and build secure software and hardware architectures for mission-critical platforms and their supporting infrastructure.
• Work with engineering teams to bring security requirements into each stage of the software development lifecycle (SDLC).
• Review architectures and find security risks in software, embedded, cloud, and hardware systems.
• Write secure design standards, engineering guidance, and product security best practices.
• Help with code review, dependency management, secrets management, and fixing vulnerabilities.
• Lead threat modeling for software, embedded systems, hardware platforms, and supporting infrastructure.
• Run cybersecurity risk assessments for products, systems, and operating environments.
• Map attack surfaces, trust boundaries, and likely exploitation paths.
• Work with engineers to rank and fix security risks, and design mitigations for threats to deployed systems and sensitive technology.
• Help meet cybersecurity compliance and product authorization needs, including RMF, ATO, export control, and regulated data handling.
• Help write system security documentation, security controls, SSPs, and assessment artifacts.
• Support internal and external security audits, assessments, and accreditation work.
• Work with government, customer, and program stakeholders on security requirements and authorization.
• Help with vulnerability assessments, coordinate penetration tests, and verify that fixes work.
• Help secure configurations and hardening across software, operating systems, and embedded environments.
• Review software and system telemetry for weaknesses or unusual behavior.
• Work with Security Operations and Infrastructure teams to improve security visibility across the enterprise and products.
• Work with Software, Embedded, Hardware, DevOps, and Infrastructure teams to balance security, performance, and operational needs.
• Help build scalable product security processes and governance.
• Support customer and internal security reviews of deployed technology and operating environments.
• Coach engineering teams on secure development and security-by-design.

Requirements

• At least 5 years in cybersecurity engineering, product security, application security, or a related engineering role.
• Experience with software security design and secure system architecture principles.
• Hands-on experience with threat modeling and cybersecurity risk assessments.
• Working knowledge of secure software development lifecycle (SSDLC) practices and application security concepts.
• Familiarity with RMF, NIST 800-53, NIST 800-171, CMMC, and DFARS.
• Experience supporting security authorization, including ATO processes, security documentation, and eMASS.
• Understanding of cloud, endpoint, network, and identity security.
• Strong analytical, troubleshooting, and technical communication skills.
• Comfortable working in a startup setting.
• You must be a U.S. citizen who can access government facilities and handle sensitive information.
• You must be able to obtain further security clearances if a contract requires them.
• Preferred: an active security clearance.
• Preferred: experience in defense, aerospace, government contracting, or regulated technology.
• Preferred: experience securing embedded systems, sensor platforms, or edge computing.
• Preferred: familiarity with export control rules, including ITAR and EAR.
• Preferred: experience with secure DevSecOps pipelines and automation.
• Preferred: experience with Microsoft GCC High environments and regulated cloud architectures.
• Preferred: firmware development experience.
• Preferred: BIOS/UEFI security or development experience.
• Preferred: hardware security design experience.
• Preferred: knowledge of Trusted Platform Module (TPM), secure boot, cryptographic hardware, or supply chain security.
• Preferred: scripting or automation in Python, PowerShell, or Bash.
• Preferred: certifications such as CISSP, CSSLP, GSEC, Security+, or an equivalent.

Conditions

Onsite work.

The posted salary range covers base pay only. It excludes bonus, equity, and benefits, and the final offer may vary based on factors such as experience, education, training, critical skills, and business needs.

If your pay expectations fall outside the range, you are still welcome to apply.

Benefits

• The company pays 100% of medical, dental, and vision benefits.
• 401k with a 50% company match on up to 6% of pay, plus FSA, HSA, life insurance, and more.
• Free lunch each workday when you are onsite, a fully stocked kitchen, unlimited PTO, and a casual dress code.
• Competitive base salaries, generous pre-IPO stock option grants, and relocation assistance.
• Annual bonuses are coming soon.