Senior Software Engineer - Security

Skydio•San Mateo, CA

About The Position

As a Senior Software Engineer - Security at Skydio, you will partner closely with senior security engineers and cross-functional teams to design, review, and build systems that secure our multi-tenant cloud and corporate environments. You will split your time roughly evenly between architecture and hands-on engineering. On one side, you will review RFCs, shape system design, and advise on initiatives with meaningful security implications. On the other, you will build and harden internal security tooling end to end. You will play a key role in maturing the systems that protect Skydio’s commercial, government, and DoD customers.

Requirements

5+ years of experience in cloud security, platform security, infrastructure security, or a related security-focused engineering role
Strong experience working in AWS, ideally in multi-tenant cloud environments
Strong coding ability and comfort building and maintaining tooling in languages such as Python or Go
Experience reviewing system designs and RFCs and providing clear, actionable security guidance
Working knowledge of SIEM, vulnerability management, and related security tooling
Comfort operating across both technical design and hands-on implementation in a role that spans both strategy and execution

Nice To Haves

Experience working in FedRAMP, SOC 2, ISO 27001, Texas RAMP, or CJIS-aligned environments
Experience building or deeply integrating authentication and identity systems, including SSO, SCIM, and front-door authentication
Experience with Kubernetes debugging, operations, or automation
Background supporting government, defense, or other highly regulated customers

Responsibilities

Review RFCs and partner with engineering teams on architectural decisions that have security implications
Design and build internal security systems end to end, including roadmap areas such as web application firewalls and vulnerability risk management tooling
Harden and improve security-related production software components as opportunities for better resilience and protection are identified
Partner with Compliance to translate FedRAMP, SOC 2, Texas RAMP, ISO 27001, and CJIS requirements into practical technical controls
Improve how we monitor, prioritize, patch, and respond to vulnerabilities across our cloud footprint
Contribute to authentication and identity systems across cloud and corporate environments, including SSO and SCIM implementations
Participate in the security team’s on-call rotation