Firestorm is hiring a Staff Platform Security Engineer to build and improve the security systems behind Crucible, the software that runs its manufacturing network for uncrewed aircraft. This hands-on role involves implementing platform security, hardening cloud and edge deployments, automating security controls, and supporting accreditation into government environments. You will work directly with software and infrastructure engineers to fix security problems in product and infrastructure code.

Responsibilities

Drive platform security execution — Own security improvements from design through implementation across Crucible, cloud infrastructure, and edge deployments.
Build security into the platform — Implement authentication, authorization, secrets, data protection, and system boundaries in product and infrastructure code.
Secure cloud and edge deployments — Harden Kubernetes, cloud infrastructure, Linux systems, and air-gapped environments.
Own identity and trust — Build approaches for user, service, workload, and device identity across connected and disconnected deployments.
Secure the software supply chain — Improve dependency security, artifact integrity, signing, provenance, and deployment controls.
Find and fix security weaknesses — Threat model systems, review designs and code, identify vulnerabilities, and drive remediation.
Automate security controls — Build security checks and tooling into CI/CD, infrastructure, and development workflows.
Support accreditation — Translate security requirements into implemented controls, technical evidence, and system designs that support ATO and customer security requirements.

Requirements

U.S. Citizenship and ability to obtain and maintain a U.S. Government security clearance
8+ years of security engineering, platform security, product security, or cloud security experience; with a proven track record of success
Strong software engineering skills and experience contributing directly to production code
Strong Linux, networking, and cloud security fundamentals
Deep experience securing Kubernetes, containers, and cloud infrastructure
Strong experience with identity and access management, authentication, authorization, secrets management, and PKI
Experience with application and platform threat modeling, security architecture, and vulnerability remediation
Experience building security automation into CI/CD, infrastructure, and deployment workflows
Experience with software supply chain security, including dependency management, artifact integrity, signing, or provenance
Demonstrated ability to design and implement security solutions across application, infrastructure, and deployment boundaries

Nice to have

Experience securing air-gapped, edge, or intermittently connected systems
Experience with NIST 800-53, RMF, ATO, or similar accreditation processes
Experience with AWS GovCloud or other regulated cloud environments
Aerospace, defense, robotics, or other regulated-industry experience

Benefits

We offer comprehensive medical, dental, and visions plans
401(k) Retirement Savings Plan to invest in your long-term retirement goals
Equity grants for new hires
Unlimited PTO
Extremely generous company holiday calendar, including a holiday hiatus in July & December.
Generous Parental Leave
Lifestyle Spending Account
FSA
DCFSA
HSA
Hospital Indemnity insurance
Critical Illness insurance
Accident insurance
Basic Life/AD&D, short-term and long-term disability insurance, 100% covered by Firestorm. Plus, the option to purchase additional life insurance for you and your family.
Mental Health Resources: We provide free mental health resources 24/7 including therapy and more. Additional work-life services, such as free legal and financial support, are available to you as well.