Sr. Security Engineer

Map critical systems, data flows, and access paths, then turn the highest-priority risks into a practical plan.

Build reusable, secure-by-default AWS infrastructure with platform engineers, including least-privilege access, network boundaries, and logging for scientific and operational systems.

Review application designs and code, build reusable authentication and authorization patterns, and fix vulnerabilities at their source.

Automate access provisioning and revocation, secrets management, and credential rotation across production and company systems, with clear audit trails and recovery paths.

Build security checks into development and deployment workflows to catch exposed secrets, vulnerable dependencies, and unsafe configuration changes before release.

Build useful detections and automate evidence gathering for investigations. Work with system owners to test incident response and recovery.

Make Google Workspace and device configurations secure by default, working with People and Operations to make onboarding and offboarding reliable and easy to use.

Partner with aircraft and field teams on secure remote access and communications for systems that operate with intermittent connectivity.

Test, monitor, and document security automation so other engineers can maintain it. Simplify controls that create unnecessary alerts, exceptions, or recurring manual work.

Experience building and maintaining security automation in production. You can show what risk it reduced, how you tested it, how failures are handled, and what manual work it eliminated.

Strong software engineering skills in Python, TypeScript, or a similar language, including testing, code review, deployment, and operating what you build.

Hands-on cloud security experience, with the ability to turn access policies, network boundaries, and logging requirements into reusable infrastructure as code.

Practical understanding of application security, authentication, authorization, secrets management, and common web and API vulnerabilities.

Experience investigating security findings and carrying fixes through to deployment and verification.

Sound judgment about risk, reliability, and maintenance costs. You can choose a simple, effective control and explain what should happen now versus later.

Ability to work independently, communicate clearly with engineers and non-engineers, and follow through on work that spans teams.

Experience with AWS, Pulumi or Terraform, and GitHub or Buildkite deployment workflows.

Experience with Tailscale or WireGuard

Security work involving robotics, aerospace, scientific computing, or remote field systems.

Experience building self-service security tools or reusable controls that other engineering teams adopted.