Senior Product Security Engineer

Mach Industries•Huntington Beach, CA

8d•$150,000 - $175,000

About The Position

We are seeking a Senior Product Security Engineer to lead security efforts across our growing Unmanned Aircraft Systems (UAS) portfolio. This role focuses on securing both hardware and increasingly software-driven systems, including autonomy platforms, command-and-control (C2) applications, APIs, cloud infrastructure, and embedded devices. As our products scale and become more connected, the attack surface expands across edge, air, and cloud environments. This role ensures security is built into the full system lifecycle—from hardware and firmware to applications and distributed services.

Requirements

5+ years of experience in Product Security, Application Security, or Security Engineering.
Programming skills in Python, C/C++, Rust, Go, or similar languages.
Experience securing software systems including APIs, microservices, and distributed platforms.
Experience with embedded systems, firmware, and Linux-based environments.
Familiarity with CI/CD pipelines and DevSecOps practices.
Ability to assess vulnerabilities across application, network, and hardware-software boundaries.
Experience delivering production-grade systems.
Familiarity with NIST or similar security frameworks.
Ability to own large initiatives independently.
Eligible to obtain a U.S. Secret clearance.

Nice To Haves

Expertise in IOT/OT penetration testing.
Experience in UAS, aerospace, robotics, or defense environments.
Knowledge of distributed systems, cloud security, and edge-to-cloud architectures.
Experience with AI/ML system security.
Familiarity with RF communications and associated security considerations.
Experience with FPGA or GPU-based systems.
Experience with infrastructure-as-code tools such as Terraform.
Proven track record leading engineering teams.

Responsibilities

Lead end-to-end product security across UAS platforms, including embedded systems, flight software, APIs, backend services, and cloud infrastructure.
Design and implement secure architectures covering device identity, authentication, authorization, and data protection.
Perform security assessments across software, firmware, and hardware, including application testing, code review, and adversarial analysis.
Build and integrate security into CI/CD pipelines, including automated testing, scanning, and policy enforcement.
Partner with software, hardware, and firmware teams to embed security into the development lifecycle.
Secure communications, telemetry, and OTA update mechanisms across distributed systems.
Develop security tooling to scale protection across multiple hardware platforms.
Lead and mentor engineers and drive cross-functional security initiatives.