2 months ago
Base Salary
$180k - $285k/yr
Responsibilities
- Lead threat modeling, architecture reviews, and design-level risk assessments for application and embedded system components.
- Conduct secure code reviews of critical Python and C/C++ modules and promote secure coding practices.
- Evaluate cryptographic usage, authentication and authorization flows, and protocol security.
- Identify and prioritize software and firmware vulnerabilities and partner with developers on remediation.
- Participate in embedded device security assessments, including software and hardware interfaces.
- Provide security guidance on secure boot, firmware update integrity, and device identity mechanisms.
- Partner with software, firmware, hardware, and systems teams to implement secure solutions.
Requirements
- 5+ years of software engineering experience focused on security.
- Experience with secure architecture design and threat modeling for complex web service and IoT/embedded systems.
- Software development and security expertise in Python, C, and C++.
- Experience with web application security best practices, including OWASP Top 10, and familiarity with embedded security concepts such as secure boot, JTAG, and UART.
- Proven ability to audit code for security flaws across different technology stacks.
- Strong knowledge of security best practices, applied cryptography, and security frameworks.
- Strong investigative, analytical, communication, and collaborative skills for working with software and hardware engineers.
Benefits
- Equity through incentive stock options.
- Company-subsidized healthcare, disability insurance, and life insurance.
- 401(k) retirement planning and flexible PTO.
- Free on-site catered meals.
- On-site role at Astranis headquarters in Northern California; U.S. citizenship, lawful permanent residency, or refugee/asylee status is required for export-control compliance.
About Astranis
Astranis designs, builds, and operates small geostationary communications satellites to deliver dedicated broadband and secure networks for telecom providers, enterprises, and government agencies. It sells satellite capacity and turnkey spacecraft/services, with offerings centered on its MicroGEO platform and contracts that include work with NASA and the U.S. Space Force across GEO and MEO missions. Founded in 2015 and headquartered in San Francisco, the company reports a commercial backlog of over $1 billion for more than a dozen MicroGEO satellites.