Senior Security Engineer - Hypersonic Systems

Software Engineeringposted 5mo ago

Stratolaunch is a technology accelerator that engineers operationally realistic testing at Mach 5+. Our air-launched, Talon testbeds are reusable, cost-effective platforms that enable routine access to the hypersonic environment. We deliver flight data critical to validating system performance and achieving rapid technology deployment. Together with our customers, we drive innovations that are imperative to advancing national security.

The Senior Security Engineer – Hypersonic Test Systems is responsible for protecting hypersonic test articles, test infrastructure, and test data from cyber-enabled compromise, manipulation, sabotage, or espionage. This role focuses on securing embedded systems, operational technology (OT), and telemetry pipelines to ensure the integrity, authenticity, and security of hypersonic testing environments. The Senior Security Engineer will work closely with engineers, developers, and program teams to integrate security into test workflows and safeguard critical systems and data.

ESSENTIAL RESPONSIBILITIES

Product and Embedded System Security:
- Secure flight computers, controllers, embedded processors, instrumentation, sensors, and telemetry devices.
- Design and validate secure boot and firmware integrity controls.
- Prevent unauthorized parameter manipulation and logic modification.
- Assess physical and cyber tamper risks and evaluate hardware trust boundaries.
Hypersonic Test Infrastructure Security:
- Secure wind tunnels, propulsion stands, thermal test environments, and data acquisition systems.
- Ensure test execution cannot be disrupted or influenced by cyber means.
- Authenticate and validate command paths and prevent cyber-induced anomalies.
Telemetry, Data Integrity, and Test Result Protection:
- Protect telemetry pipelines end-to-end and ensure test data integrity and authenticity.
- Secure digital twins, models, and simulations, and establish defensible data lineage.
- Detect and mitigate risks of false data introduction.
Secure Development and Engineering Enablement:
- Perform threat modeling on cyber-physical workflows.
- Integrate security into test software development and mitigate supply chain risks in test tooling.
- Red-team test environments prior to execution.
Supply Chain and Component Assurance:
- Define security requirements for suppliers and validate firmware provenance.
- Identify counterfeit or compromised components and assess third-party test equipment risks.

QUALIFICATIONS

8+ years of experience in product security, embedded security, OT security, or cyber-physical systems.
Hands-on experience securing non-cloud, non-SaaS systems.
Experience with embedded Linux, RTOS, or bare-metal environments.
Direct involvement with test systems, mission systems, or safety-critical environments.
Ability to threat-model hardware, software, and operational workflows.
Familiarity with nation-state adversary tradecraft.
Experience working in classified or export-controlled environments.
Active Top Secret clearance or ability to obtain and maintain clearance is required.

EDUCATION & EXPERIENCE

Sr. Level ($120,000-158,000) BS or applicable experience in lieu of degree, plus 5-10 years of relevant experience

PREFERRED SKILLS & CERTIFICATIONS

Certifications such as CISSP, CISSP-ISSEP, or equivalent.
Familiarity with regulatory requirements such as NISPOM, ITAR, and DFARS.
Familiarity with CMMC Level 2+ requirements and RMF for non-IT systems.

Special remarks regarding work environment, if applicable

This position is located on-site or hybrid.

Base salary and leveling are established on a case-by-case basis. We consider several factors to ensure a competitive offer, including your location, educational background, and a comprehensive assessment of the skills and experience demonstrated during your interviews.

Benefits and our location(s):

Healthcare (medical, dental, vision, prescription drugs)
Paid Maternity and Parental Leave
50% company match per contributed dollar into 401(k) savings plan, up to $11,500
Tuition reimbursement

This position may involve the operation of company vehicles as part of assigned duties.

Mojave Air & Spaceport is located just outside of Lancaster/Palmdale and is only 95 miles north of Los Angeles. The area offers both affordability and central access to a variety of California's best attractions and landmarks.

Not much for the outdoors and prefer the city life? You’re within a half day’s drive or less of Los Angeles, San Diego, Las Vegas, and San Francisco where you can find a variety of live entertainment, museums, tours, and historical sight-seeing. Theme parks are in abundance, with Six Flags Magic Mountain, Disneyland, and Knotts Berry Farm ready to meet the needs of rollercoaster thrill seekers.

Food and drink fanatics are in a haven of delectable choices. Wine aficionados will also find easy access to some of the state’s best vino in Paso Robles, Santa Ynez, and even more locally in Tehachapi and Agua Dulce. Beer fanatics will find some of the best West Coast IPAs at Bravery and Lucky Luke’s in Lancaster. Any food option you crave is covered, and we always recommend the authentic and fresh Mexican food that you won’t find anywhere else in the United States.

Stratolaunch is an equal opportunity employer that values diversity at our company. We encourage people from all walks of life to apply, without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability or any other characteristic protected by law. Our management team does not tolerate discrimination or harassment at any point during our employees’ and applicants’ time with us, especially with respect to recruitment, hiring, placement, promotion, transfer, training, compensation, benefits, employee activities, and general treatment during employment. For purposes of transparency, U.S. Citizenship may be required for some positions with a government clearance and certain other restricted positions.

Equal Employment Opportunity is the Law :

https://www.dol.gov/ofccp/regs/compliance/posters/pdf/eeopost.pdf