{"id":3295008,"url":"https://alion.io/job/revel-security-engineer","title":"Security Engineer","company":{"id":1952184,"name":"Revel","domain":"revel.io","url":"https://alion.io/company/revel-io","size_band":"11-50","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":84,"open_postings":21,"ghost_share":0,"stale_share":0.524,"repost_share":0.19,"time_to_fill_p50_days":27,"computed_at":"2026-11-06T05:58:05Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Los Angeles, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":118000,"max_usd":273000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2372},"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"AWS CDK","optional":false},{"name":"CI/CD","optional":false},{"name":"CMMC","optional":false},{"name":"Docker","optional":false},{"name":"Kubernetes","optional":false},{"name":"Linux","optional":false},{"name":"NIST 800-171","optional":false},{"name":"Python","optional":false},{"name":"Rust","optional":false},{"name":"Terraform","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Azure","optional":true},{"name":"Crowdstrike","optional":true},{"name":"FedRAMP","optional":true},{"name":"NIST 800-53","optional":true},{"name":"SentinelOne","optional":true},{"name":"SIEM","optional":true},{"name":"Splunk","optional":true}],"status":"live","first_seen_at":"2026-10-26T19:10:49Z","employer_posted_date":"2026-10-26","last_verified_at":"2026-11-07T00:01:12Z","board_verified":true,"closed_at":null,"days_open":11,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":11},"description":"About Revel\nAt Revel, we are revolutionizing the way the world's most critical hardware is controlled-across aerospace, automotive, energy, and manufacturing sectors. Our next-generation software stack combines an intuitive command/control interface, a specialized programming language tailored for hardware control, and a high-performance runtime environment. We empower engineers to build, test, and deploy critical systems rapidly, reliably, and safely.\nAbout the Role\nYou'll be Revel's first security engineer. There's no existing program to inherit and no legacy decisions to work around. You'll set the foundation for how Revel protects its platform, its infrastructure, and its customers.\nRevel's software runs test campaigns and controls hardware for teams building rockets, satellites, and energy systems. It deploys across cloud, on-prem, and air-gapped environments, often next to export-controlled programs and sensitive hardware. Our customers trust us with critical work, and you'll be the person who makes sure that trust is earned. This isn't a compliance-only role. You'll spend most of your time building, and you'll be as close to our product architecture as you are to our infrastructure.\nAs Revel grows, you'll have the opportunity to build and lead the security team.\nWhat You'll Do\nBuild the program from zero. Define Revel's security strategy, architecture, and roadmap, then roll up your sleeves and build it. You'll decide what matters most now and what can wait.\n\nSecure a platform that touches real hardware. Our software doesn't just move data. It commands physical systems. Threat-model the product end to end, from the control software and its interfaces to the hardware it runs against. Then turn that into concrete security requirements, design reviews, and testing that ship with every release.\n\nBring security into product design. Work with product and engineering leads early in the design process, so security is part of the architecture rather than bolted on before a customer review.\n\nOwn the stack end to end. From the Linux hosts and physical systems that sit alongside real hardware in labs and at customer sites, to cloud accounts, Kubernetes clusters, CI/CD pipelines, endpoints, and SaaS tools, you’ll harden all of it. Treat security configuration as code, and automate wherever you can.\n\nMake secure delivery the default. Build scanning, secrets management, dependency controls, and signed, auditable releases into our pipelines, including how we deliver software into restricted and disconnected networks, without slowing engineering down.\n\nStand up detection and response. Build our logging, monitoring, and alerting from scratch, and lead incident response and vulnerability management when things go wrong.\n\nTurn compliance into engineering. Lead Revel's approach to ITAR, NIST 800-171, CUI handling, and CMMC. Build compliance evidence and reporting into our systems instead of maintaining spreadsheets.\n\nBe the security voice customers trust. Serve as Revel's primary security contact for defense and aerospace customers, from security questionnaires to architecture reviews.\n\nMake everyone better at security. Partner with software and embedded engineers on threat modeling and secure design, and help every Revel employee understand their part.\n\nGrow the function. As the company scales, help define when and who we hire next in security, and shape what the team becomes.\n\nWhat We're Looking For\n7+ years of hands-on security engineering experience, with real depth in infrastructure security across cloud, on-prem, and physical systems\n\nExperience in product or application security, including threat modeling, secure design reviews, and securing software that interacts with hardware or embedded systems\n\nProduction experience with Infrastructure as Code (Terraform, AWS CDK, or similar) and securing CI/CD pipelines\n\nExperience securing containerized, cloud-native environments, including Docker and Kubernetes\n\nWorking knowledge of NIST 800-171, CUI, and related frameworks. You know what the requirements say and how to implement them in modern infrastructure.\n\nExperience conducting security architecture reviews and implementing defensive controls across endpoints, SaaS apps, and infrastructure\n\nProficiency in at least one general-purpose language (Python, Go, Rust, or similar). You build tools, not just configure them.\n\nStrong production Linux experience\n\nThe judgment to prioritize ruthlessly and the ownership to see things through without a playbook\n\nNice to Have\nPrevious experience as a first or early security hire\n\nExperience leading or managing a security team\n\nExperience in defense, aerospace, data centers, or other regulated environments (ITAR, CMMC, RMF, NIST 800-53, DISA STIGs, FedRAMP)\n\nExperience with government cloud environments (AWS GovCloud, Azure Government) or delivering software into air-gapped networks\n\nExperience with embedded systems security, such as secure boot, firmware signing, key management, or securing hardware-in-the-loop environments\n\nHands-on experience with SIEM and EDR tools (e.g., Splunk, Panther, CrowdStrike, SentinelOne)\n\nExperience briefing security architectures to technical government or defense customers\n\nJoin us to redefine what’s possible in software for hardware.\nITAR Requirements\nTo conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. 1157, or (iv) Asylee under 8 U.S.C. 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here.","description_format":"text","description_chars":5659,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":true,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Custom Software Development","Manufacturing & Industrial Software"],"lifecycle":[{"event":"open","at":"2026-10-26T21:31:22Z"}],"visa":[],"liveness":{"score":53,"band":"ok","label":"Likely open","p_open":1,"p_active":0.593,"p_room":0.9,"age_days":10,"expected_fill_days":27,"reasons":["conf:4","stale_co","velocity","win:mid"],"computed_at":"2026-11-06T05:58:05Z"},"pay":null,"html_url":"https://alion.io/job/revel-security-engineer","json_url":"https://alion.io/job/revel-security-engineer.json","meta":{"generated_at":"2026-11-07T01:13:56Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3041,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-08T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1952184},"rest":"https://alion.io/mcp/rest/get_company?id=1952184"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Frevel-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Frevel-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Frevel-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/revel-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Frevel-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3295008}},{"tool":"search_jobs","arguments":{"company":"revel.io","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3295008},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}