2 months ago
San Diego, CA, USAStaff+
Base Salary
$175k - $195k/yr
Responsibilities
- Own security improvements across Crucible, cloud infrastructure, and edge deployments from design through implementation.
- Implement authentication, authorization, secrets management, data protection, and system boundaries in product and infrastructure code.
- Harden Kubernetes, containers, cloud infrastructure, Linux systems, and air-gapped environments.
- Build identity and trust approaches for users, services, workloads, and devices across connected and disconnected deployments.
- Improve software supply-chain security through dependency management, artifact integrity, signing, provenance, and deployment controls.
- Threat model systems, review designs and code, identify vulnerabilities, and drive remediation.
- Automate security checks and controls in CI/CD, infrastructure, and development workflows.
- Translate security requirements into implemented controls, technical evidence, and system designs supporting ATO and customer security requirements.
Requirements
- U.S. citizenship and the ability to obtain and maintain a U.S. Government security clearance are required.
- At least 8 years of security engineering, platform security, product security, or cloud security experience are required.
- Strong software engineering skills and direct contributions to production code are required.
- Strong Linux, networking, and cloud security fundamentals are required.
- Deep experience securing Kubernetes, containers, and cloud infrastructure is required.
- Strong experience with identity and access management, authentication, authorization, secrets management, and PKI is required.
- Experience with threat modeling, security architecture, and vulnerability remediation is required.
- Experience building security automation into CI/CD, infrastructure, and deployment workflows is required.
- Experience with software supply-chain security, including dependency management, artifact integrity, signing, or provenance, is required.
- Ability to design and implement security solutions across application, infrastructure, and deployment boundaries is required.
- Experience with air-gapped, edge, or intermittently connected systems is preferred.
- Experience with NIST 800-53, RMF, ATO, or similar accreditation processes is preferred.
- Experience with AWS GovCloud or other regulated cloud environments is preferred.
- Aerospace, defense, robotics, or other regulated-industry experience is preferred.
Benefits
- Comprehensive medical, dental, and vision plans.
- 401(k) retirement savings plan.
- Equity grants for new hires.
- Unlimited PTO.
- Generous company holiday calendar, including July and December holiday hiatuses.
- Generous parental leave.
- Lifestyle Spending Account, FSA, DCFSA, and HSA.
- Hospital indemnity, critical illness, and accident insurance.
- Basic life/AD&D and short- and long-term disability insurance, 100% covered by Firestorm, with optional additional life insurance.
- Free 24/7 mental health resources and additional work-life services including legal and financial support.
- Role is based in San Diego, CA, with relocation assistance potentially included in the offer package.
Tech Stack
Categories
About Firestorm
Firestorm builds modular, open-architecture unmanned systems and mission-configurable hardware for defense customers, leveraging additive manufacturing to rapidly tailor platforms for diverse Department of Defense mission areas. Its fielded xCell platform is being developed in multiple variants and supported across mechanical, electrical, software, and manufacturing interfaces. Founded in 2022 and headquartered in San Diego, the privately held company sells hardware platforms and components to U.S. and allied military programs.