Staff Platform Security Engineer

Firestorm builds uncrewed aircraft and software for its manufacturing network. The Staff Platform Security Engineer builds and improves security systems behind Crucible and Firestorm’s software infrastructure, implementing platform security, hardening deployments, automating controls, and supporting deployment into accredited environments.

Responsibilities

• Drive platform security execution — Own security improvements from design through implementation across Crucible, cloud infrastructure, and edge deployments
• Build security into the platform — Implement authentication, authorization, secrets, data protection, and system boundaries in product and infrastructure code
• Secure cloud and edge deployments — Harden Kubernetes, cloud infrastructure, Linux systems, and air-gapped environments
• Own identity and trust — Build approaches for user, service, workload, and device identity across connected and disconnected deployments
• Secure the software supply chain — Improve dependency security, artifact integrity, signing, provenance, and deployment controls
• Find and fix security weaknesses — Threat model systems, review designs and code, identify vulnerabilities, and drive remediation
• Automate security controls — Build security checks and tooling into CI/CD, infrastructure, and development workflows
• Support accreditation — Translate security requirements into implemented controls, technical evidence, and system designs that support ATO and customer security requirements

Skills

• U.S. Citizenship and ability to obtain and maintain a U.S. Government security clearance
• 8+ years of security engineering, platform security, product security, or cloud security experience; with a proven track record of success
• Strong software engineering skills and experience contributing directly to production code
• Strong Linux, networking, and cloud security fundamentals
• Deep experience securing Kubernetes, containers, and cloud infrastructure
• Strong experience with identity and access management, authentication, authorization, secrets management, and PKI
• Experience with application and platform threat modeling, security architecture, and vulnerability remediation
• Experience building security automation into CI/CD, infrastructure, and deployment workflows
• Experience with software supply chain security, including dependency management, artifact integrity, signing, or provenance
• Demonstrated ability to design and implement security solutions across application, infrastructure, and deployment boundaries
• Experience securing air-gapped, edge, or intermittently connected systems
• Experience with NIST 800-53, RMF, ATO, or similar accreditation processes
• Experience with AWS GovCloud or other regulated cloud environments
• Aerospace, defense, robotics, or other regulated-industry experience

Benefits

• Relocation assistance is available and may be included in the offer package where appropriate.
• Opportunities for career growth
• Comprehensive medical, dental, and vision plans
• 401(k) Retirement Savings Plan
• Equity grants for new hires
• Unlimited PTO
• Extremely generous company holiday calendar, including a holiday hiatus in July & December
• Generous Parental Leave
• Lifestyle Spending Account
• FSA
• DCFSA
• HSA
• Hospital Indemnity insurance
• Critical Illness insurance
• Accident insurance
• Basic Life/AD&D, short-term and long-term disability insurance, 100% covered by Firestorm
• Option to purchase additional life insurance for you and your family
• Free mental health resources 24/7 including therapy
• Free legal and financial support

Company Overview