Senior Product Security Engineer

Description

The company builds defense products, and its platforms run on a distributed network architecture that supports warfighters, commercial air operators, and border protection teams.

Founded in 2022, the company has raised $1 billion from investors including 8VC, Accel, and Valor Equity Partners. It is headquartered in Los Angeles and has offices in Washington, D.C., San Francisco, San Diego, and London, with over 500 employees.

This role supports the Senior Product Security Engineer on product security for next-generation sensor platforms and their software. You will work with Engineering, Embedded Systems, Infrastructure, and Program teams to build security into each stage of the product lifecycle, from architecture and development to deployment and ongoing support.

The ideal candidate has secured complex software and hardware in defense, aerospace, or other heavily regulated fields. You will help shape software security architecture, support threat modeling and risk assessments, assist with compliance work, and help set secure engineering standards across the company.

The work is hands-on and collaborative, and it directly affects the security and resilience of mission-critical technology used in the field.

Responsibilities

• Help design and build secure software and hardware architectures for mission-critical platforms and their supporting infrastructure
• Work with engineering teams to bring security requirements into every stage of the software development lifecycle (SDLC)
• Run architecture reviews and find security risks in software, embedded, real-time, and hardware systems
• Write secure design standards, engineering guidance, and product security best practices
• Support secure development work such as code review, dependency management, secrets management, and fixing vulnerabilities
• Carry out threat modeling for software, embedded systems, hardware platforms, and supporting infrastructure
• Help run cybersecurity risk assessments for products, systems, and operating environments
• Map attack surfaces, define trust boundaries, and reduce the ways an attacker could exploit a system
• Work with engineering teams to rank and fix security risks
• Build mitigation plans for threats against deployed systems and sensitive technology
• Support compliance and product authorization work, including RMF and ATO
• Write system security documentation, security controls, SSPs, and assessment artifacts
• Support internal and external security audits, assessments, and accreditation activities
• Work with government, customer, and program stakeholders on security requirements and authorization
• Document security boundaries for both hardware and software
• Plan security testing, including vulnerability assessments, coordination of penetration tests, and verification of fixes
• Help with secure configuration and hardening across software, operating systems, and embedded environments
• Review software and system telemetry for security weaknesses or unusual behavior
• Work with Security Operations and Infrastructure teams to improve security visibility for products and the enterprise
• Work with Software, Embedded, Hardware, DevSecOps, and Infrastructure teams to balance security, performance, and operational needs
• Help build scalable product security processes and governance
• Support customer and internal security reviews of deployed technology and operating environments
• Advise engineering teams on secure development and security-by-design

Requirements

• At least 5 years in cybersecurity engineering, product security, application security, or a related engineering role
• Experience with software security design, secure system architecture, or both
• Hands-on experience supporting threat modeling and cybersecurity risk assessments
• Knowledge of SSDLC practices and application security concepts
• Familiarity with RMF, NIST 800-53, NIST 800-171, and DFARS
• Experience supporting security authorization, including ATO processes, security documentation, and eMASS management
• Experience securing embedded systems, sensor platforms, or edge computing
• Knowledge of cryptographic systems, key management systems, and key handling standards
• Strong analytical, troubleshooting, and technical communication skills
• Comfortable working at the pace of a fast-moving startup
• Must be a U.S. citizen eligible to work in government facilities and handle sensitive information
• Must be able to obtain additional security clearances if a contract requires them
• Preferred: an active security clearance
• Preferred: experience in defense, aerospace, government contracting, or other heavily regulated technology
• Preferred: firmware security or development experience
• Preferred: BIOS or UEFI security or development experience
• Preferred: knowledge of Trusted Platform Module (TPM), secure boot, cryptographic hardware, or supply chain security
• Preferred: security certifications such as CISSP, CSSLP, GSEC, Security+, or an equivalent

Conditions

The posted salary range covers base pay only and does not include bonus, equity, or benefits. The range is an estimate, and the actual offer may vary based on factors such as experience, education, training, critical skills, and business needs.

If your pay expectations fall outside the range, you are still welcome to apply.

This is an onsite role.

Benefits

• Medical, dental, and vision benefits, 100% paid by the company
• 401(k) with a 50% company match up to 6% of pay, plus FSA, HSA, life insurance, and more
• Free daily lunch when working onsite, a fully stocked kitchen, unlimited PTO, and a casual dress code
• Base salary, pre-IPO stock option grants, and relocation assistance
• Annual bonuses are coming soon