Security Engineer

Revel•Los Angeles, CA

13d

About The Position

Revel is hiring its first security engineer to establish and build the company’s security program, protecting its platform, infrastructure, and customers. Revel’s software runs test campaigns and controls hardware for aerospace, automotive, energy, and manufacturing teams, and is deployed in cloud, on-premises, and air-gapped environments, including alongside export-controlled programs and sensitive hardware. This is a hands-on engineering role focused on product architecture as well as infrastructure, with the opportunity to help build and lead the security team as Revel grows.

Requirements

7+ years of hands-on security engineering experience, with substantial infrastructure security experience across cloud, on-premises, and physical systems.
Experience in product or application security, including threat modeling, secure design reviews, and securing software that interacts with hardware or embedded systems.
Production experience with Infrastructure as Code, such as Terraform or AWS CDK, and securing CI/CD pipelines.
Experience securing containerized, cloud-native environments, including Docker and Kubernetes.
Working knowledge of NIST 800-171, CUI, and related frameworks, including how to implement requirements in modern infrastructure.
Experience conducting security architecture reviews and implementing defensive controls across endpoints, SaaS applications, and infrastructure.
Proficiency in at least one general-purpose programming language, such as Python, Go, or Rust.
Strong production Linux experience.
Sound judgment in prioritizing work and ownership in carrying it through without an established playbook.
Must meet applicable U.S. Government export-regulation eligibility requirements: be a U.S. citizen or national, lawful permanent resident, refugee, or asylee, or be eligible to obtain the required authorizations from the U.S. Department of State.

Nice To Haves

Previous experience as a first or early security hire.
Experience leading or managing a security team.
Experience in defense, aerospace, data centers, or other regulated environments, including ITAR, CMMC, RMF, NIST 800-53, DISA STIGs, or FedRAMP.
Experience with government cloud environments such as AWS GovCloud or Azure Government, or delivering software into air-gapped networks.
Experience with embedded systems security, such as secure boot, firmware signing, key management, or securing hardware-in-the-loop environments.
Hands-on experience with SIEM and EDR tools such as Splunk, Panther, CrowdStrike, or SentinelOne.
Experience briefing security architectures to technical government or defense customers.

Responsibilities

Define Revel’s security strategy, architecture, and roadmap, and build the security program from the ground up.
Threat-model the product end to end, including control software, interfaces, and the hardware it operates against; translate findings into security requirements, design reviews, and testing.
Partner with product and engineering leads early in product design to incorporate security into the architecture.
Harden Linux hosts and physical systems in labs and at customer sites, as well as cloud accounts, Kubernetes clusters, CI/CD pipelines, endpoints, and SaaS tools.
Treat security configuration as code and automate security controls where possible.
Build scanning, secrets management, dependency controls, and signed, auditable releases into delivery pipelines, including processes for restricted and disconnected networks.
Build logging, monitoring, and alerting, and lead incident response and vulnerability management.
Lead Revel’s approach to ITAR, NIST 800-171, CUI handling, and CMMC, integrating compliance evidence and reporting into systems.
Serve as Revel’s primary security contact for defense and aerospace customers, including security questionnaires and architecture reviews.
Partner with software and embedded engineers on threat modeling and secure design, and help employees understand their security responsibilities.
Help determine future security hiring needs and shape the security team as the company scales.