Red Team Engineer, Product Security

Apex Technology, Inc.•Los Angeles, CA

2d•$160,000 - $200,000•Onsite

About The Position

Apex is hiring a hands-on Red Team Engineer for its Product Security team. The role attacks Apex products as a capable adversary would, including spacecraft, ground stations, cloud command-and-control software, development pipelines, and factory processes. The engineer will conduct internal assessments, lead external assessment firms, build ongoing testing tools, and contribute an attacker’s perspective to design reviews. This is an engineering role rather than an audit, compliance, or security policy position. The Product Security team is small, and this hire will be its second core member. The engineer will work directly with the Product Security Architect and alongside security engineers embedded in flight software, ground software, and development infrastructure teams. The position is a senior individual-contributor role, though strong mid-level candidates with deep hands-on experience will also be considered. The work focuses on unclassified matters; an active security clearance is not required, though eligibility for a U.S. security clearance is preferred. Applicants must meet the stated U.S. citizenship requirement. Separately, Apex notes that its work is subject to U.S. export control laws and says applicants must qualify as a U.S. Person or be able to obtain the required export authorizations.

Requirements

U.S. citizenship.
3–10 years of hands-on offensive security experience in penetration testing, red teaming, exploit development, or vulnerability research.
A track record of building custom tools, harnesses, or automation when off-the-shelf solutions are inadequate.
Experience combining multiple smaller weaknesses into a realistic attack path.
Solid fundamentals in operating systems, networking, and applied cryptography.
Comfort reading and debugging unfamiliar code.
Ability to own a technical project from start to finish with little direction.
Clear communication when explaining fixes to engineers and risks to leadership.

Nice To Haves

Experience with embedded or cyber-physical systems in space, aerospace, automotive, robotics, industrial/OT, medical devices, or autonomous vehicles.
Experience building fuzzing harnesses for embedded or protocol targets and working with RTOS, embedded Linux, or hardware interfaces such as JTAG, SWD, SPI, I2C, or CAN.
Experience with AI-assisted security testing.
Familiarity with RF and satellite command links, GNSS spoofing and jamming, or ground station architecture.
Experience scoping or directing outside assessment firms.
Public work such as CVEs, published research, conference talks, or CTF results, or space security training such as the Hack The Box Satellite Exploitation track.
Eligibility for a U.S. security clearance; an active clearance is not required.

Responsibilities

Plan and conduct adversary emulation against spacecraft, flight software, ground systems, and development pipelines, using SPARTA and MITRE ATT&CK to structure the work.
Identify attack paths that cross system boundaries, such as a ground-system compromise leading to spacecraft control.
Lead third-party security assessments by setting their scope, providing testers with environments and engineering support, and integrating their findings with internal results.
Design and build fuzzing and automated testing capabilities, including agent-driven test generation, to run testing with every release.
Reverse engineer firmware and protocols, analyze embedded hardware interfaces, and review cryptographic implementations.
Participate in design reviews and technical trade-offs to identify how proposed designs could be attacked before they are built.
Co-chair the product security incident response process, triage reported vulnerabilities, and coordinate fixes.
Work with engineering teams to address root causes and help engineers learn to think like attackers.

Benefits

Equity in Apex.
Company-paid medical, dental, and vision coverage for the employee and dependents.
$100,000 life insurance at no cost.
Paid vacation starting at 15 days and growing to 20 or more days annually.
10 paid holidays.
401(k) plan with matching: 100% match on the first 3% and 50% on the next 2%.
Eight weeks of paid parental leave.
Childcare reimbursement up to $350 per day for work-related travel.
Daily catered lunch and unlimited snacks.
Monthly office socials, pickleball tournaments, run club, and gatherings for employees and their families.
Desk setup and tools needed for productivity.
In-person collaboration at the Playa Vista office, with flexibility to integrate work and life.
Long-term incentives in the form of stock options.