Cybersecurity Engineer

Grid Aero•San Leandro, CA

3d•Onsite

About The Position

Grid.aero is building the next generation of autonomous aviation systems for defense and commercial applications. Led by experienced aerospace and technology operators and backed by leading venture investors, we solve hard operational problems at the intersection of autonomy, resilient logistics, and scalable air mobility. We move quickly, operate with urgency, and build systems designed for real-world deployment where small teams own meaningful problems end-to-end. Above all, we look for exceptional builders with deep internal drive, massive throughput, hopeless optimism, and a relentless growth mindset. The people who thrive at Grid operate with urgency, learn quickly, adapt fast, and are energized by hard problems with no obvious answers. We value individuals who continuously push themselves and the team around them to improve. This is an opportunity to work on products with national and global impact alongside a collaborative team that values technical excellence, execution, and mission focus. We are seeking a Cybersecurity Engineer to own cybersecurity for our autonomous aircraft and the systems that support it. You will lead the path to authority to operate, secure our development environment, and build security into the design from the start. You will pick the simplest controls that do the job.

Requirements

First-principles thinker who finds the simplest path to the goal and thrives in a fast-paced environment
4+ years of experience in cybersecurity engineering, preferably on DoD systems
Experience with RMF and ATO packages
Familiarity with NIST SP 800-53 and NIST SP 800-171
Due to U.S. export control laws, candidates must be U.S. persons (U.S. citizens or lawful permanent residents).

Nice To Haves

Experience with embedded, avionics, or weapon system cybersecurity preferred
Security+, CISSP, or similar certification preferred
Experience with CMMC assessment and compliance

Responsibilities

Lead the Risk Management Framework (RMF) process through authority to operate (ATO)
Build and maintain security documentation such as system security plans and control assessments
Define security requirements for the aircraft, ground systems, and data links
Protect controlled unclassified information across the company
Work with the software team to build and run a secure DevSecOps pipeline
Assess threats and vulnerabilities and drive fixes into the design