Principal Software Security Engineer

Rocket Lab Corporation•Littleton, CO

1d•Onsite

About The Position

Based out of Rocket Lab's site in Littleton, Co, we are seeking a Principal Software Security Engineer to lead security architecture and implementation across out integrated hardware-software systems. This role focuses on securing complex cyber-physical systems including embedded platforms, avionics, ground stations, and space vehicle infrastructure.

Requirements

Bachelor's degree in Computer Science, Information Security, or a related field
12+ years of experience in Cybersecurity with focus on systems, embedded or infrastructure security
Experience with hardware security principles (secure boot, TPM, HSM, side-channel attacks)
Experience securing embedded Linux, RTOS, or bare-metal systems
Demonstrated knowledge of cryptography implementation in resource-constrained environments
Expertise in network security, including air-gapped architectures and secure enclaves
Active Secret clearance, or ability to obtain and maintain one
U.S. citizenship is required, due to program requirements

Nice To Haves

Master's degree in Computer Science, Information Security, or related field
Active TS/SCI clearance
Experience with aerospace, defense, or space systems security
Knowledge of satellite communication protocols and RF security
Familiarity with DO-178C, DO-254, or similar safety-critical development standards
Hardware reverse engineering or penetration testing experience
Certifications: CISSP, GIAC (GPEN, GXPN), CEH, or equivalent
Experience with FPGA security or hardware design tools (Vivavo, Quartus)

Responsibilities

Systems Security Architecture Design and Implement security architectures for integrated hardware/software systems
Secure embedded systems, firmware, FPGA implementations, and hardware interfaces
Develop security controls for satellite buses, payload systems, and ground segment infrastructure
Conduct hardware security assessments including supply chain risk analysis and component-level security
Cyber-Physical Security Establish security requirements for RF communications, telemetry, and command systems
Implement cryptographic key management for space and ground systems
Secure network infrastructure, including air-gapped and classified environments
Design secure boot chains, trusted execution environments, and hardware root of trust implementations
Technical Leadership Lead cross-functional security reviews involving hardware, firmware, and software teams
Mentor engineers on systems security best practices across the full stack
Drive security integration into DevSecOps pipelines and hardware development
Interface with government customers on security accreditation requirements (RMF, ICD 503, NIST 800-53)
Compliance & Risk Management Ensure compliance with DFARS, CMMC, ITAR, and aerospace security standards
Conduct threat modeling for hardware/software attack surfaces
Perform security risk assessments for mission critical systems
Support security certification and accreditation activities