Security Engineer

Revel•Los Angeles, CA

About The Position

Revel is hiring its first security engineer to establish the company’s security strategy, architecture, and roadmap. The role builds security foundations for a software platform used to test campaigns and control hardware across aerospace, automotive, energy, and manufacturing. The platform is deployed in cloud, on-premises, and air-gapped environments, including settings involving export-controlled programs and sensitive hardware. This is a hands-on engineering role spanning product architecture and infrastructure, rather than a compliance-only position. The engineer will secure the product and its interactions with physical systems, build and automate infrastructure and delivery controls, establish detection and incident-response capabilities, and lead compliance engineering. As Revel grows, the role may help build and lead the security function. The position also serves as the primary security contact for defense and aerospace customers and supports security awareness across the company.

Requirements

At least 7 years of hands-on security engineering experience, including substantial infrastructure security experience across cloud, on-premises, and physical systems.
Experience in product or application security, including threat modeling, secure design reviews, and securing software that interacts with hardware or embedded systems.
Production experience with Infrastructure as Code, such as Terraform or AWS CDK, and securing CI/CD pipelines.
Experience securing containerized, cloud-native environments, including Docker and Kubernetes.
Working knowledge of NIST 800-171, CUI, and related frameworks, including how to implement their requirements in modern infrastructure.
Experience conducting security architecture reviews and implementing defensive controls across endpoints, SaaS applications, and infrastructure.
Proficiency in at least one general-purpose programming language, such as Python, Go, or Rust, and ability to build tools.
Strong production Linux experience.
Sound judgment in prioritizing work and ownership to deliver without an existing playbook.
To conform to U.S. Government export regulations, the applicant must be a U.S. citizen or national, U.S. lawful permanent resident, refugee under 8 U.S.C. 1157, asylee under 8 U.S.C. 1158, or eligible to obtain required authorizations from the U.S. Department of State.

Nice To Haves

Previous experience as a first or early security hire.
Experience leading or managing a security team.
Experience in defense, aerospace, data centers, or other regulated environments, including ITAR, CMMC, RMF, NIST 800-53, DISA STIGs, or FedRAMP.
Experience with government cloud environments, such as AWS GovCloud or Azure Government, or delivering software into air-gapped networks.
Experience with embedded systems security, such as secure boot, firmware signing, key management, or securing hardware-in-the-loop environments.
Hands-on experience with SIEM and EDR tools, such as Splunk, Panther, CrowdStrike, or SentinelOne.
Experience briefing security architectures to technical government or defense customers.

Responsibilities

Define Revel’s security strategy, architecture, and roadmap, and implement the security program from the ground up.
Threat-model the product end to end, including control software, interfaces, and the hardware it operates with; translate findings into security requirements, design reviews, and testing.
Partner with product and engineering leads early in the design process to incorporate security into product architecture.
Secure Linux hosts and physical systems in labs and customer sites, cloud accounts, Kubernetes clusters, CI/CD pipelines, endpoints, and SaaS tools.
Treat security configuration as code and automate security controls where practical.
Build scanning, secrets management, dependency controls, and signed, auditable releases into delivery pipelines, including delivery to restricted and disconnected networks.
Establish logging, monitoring, and alerting, and lead incident response and vulnerability management.
Lead Revel’s approach to ITAR, NIST 800-171, CUI handling, and CMMC, integrating compliance evidence and reporting into systems.
Serve as the primary security contact for defense and aerospace customers, including security questionnaires and architecture reviews.
Partner with software and embedded engineers on threat modeling and secure design, and help employees understand their security responsibilities.
Help determine future security hiring needs and shape the security team as the company scales.