Sr. Security Engineer

Rainmaker Technology Corporation•El Segundo, CA

2d•$128,000 - $225,000

About The Position

Rainmaker is hiring a Senior Security Engineer to build security into software and hardware development and field operations. The role involves writing production code and designing secure defaults across AWS, applications, and company systems to protect scientific data and the systems used by aircraft and field teams. The engineer will automate routine security controls and checks as the company grows, and work closely with engineers to test, operate, and improve systems while keeping secure workflows straightforward to use. Rainmaker builds technologies for cloud seeding, including weather-resistant UAS, radar and satellite observations, numerical weather prediction, sensing and validation systems, and sustainable seeding technologies. The engineering team builds the software, infrastructure, and aircraft systems supporting cloud-seeding operations and works with scientists and field operators to turn weather data into reliable systems. Success in the first 90 days includes mapping critical systems and access paths, agreeing on priority risks, deploying a tested secure configuration or access control on a critical system, automating a recurring security workflow with monitoring and a tested recovery path, and testing a detection and response path with the engineers who will use it.

Requirements

Experience building and maintaining security automation in production, including demonstrating risk reduction, testing, failure handling, and eliminated manual work.
Strong software engineering skills in Python, TypeScript, or a similar language, including testing, code review, deployment, and operating the resulting systems.
Hands-on cloud security experience and ability to turn access policies, network boundaries, and logging requirements into reusable infrastructure as code.
Practical understanding of application security, authentication, authorization, secrets management, and common web and API vulnerabilities.
Experience investigating security findings and carrying fixes through to deployment and verification.
Sound judgment about risk, reliability, and maintenance costs, including the ability to choose and explain simple, effective controls and priorities.
Ability to work independently, communicate clearly with engineers and non-engineers, and follow through on work spanning teams.

Nice To Haves

Experience with AWS, Pulumi or Terraform, and GitHub or Buildkite deployment workflows.
Experience with Tailscale or WireGuard.
Security work involving robotics, aerospace, scientific computing, or remote field systems.
Experience building self-service security tools or reusable controls adopted by other engineering teams.

Responsibilities

Map critical systems, data flows, and access paths, and create a practical plan addressing the highest-priority risks.
Build reusable, secure-by-default AWS infrastructure with platform engineers, including least-privilege access, network boundaries, and logging for scientific and operational systems.
Review application designs and code, build reusable authentication and authorization patterns, and fix vulnerabilities at their source.
Automate access provisioning and revocation, secrets management, and credential rotation across production and company systems, with clear audit trails and recovery paths.
Build security checks into development and deployment workflows to catch exposed secrets, vulnerable dependencies, and unsafe configuration changes before release.
Build useful detections and automate evidence gathering for investigations; work with system owners to test incident response and recovery.
Make Google Workspace and device configurations secure by default, partnering with People and Operations to make onboarding and offboarding reliable and easy to use.
Partner with aircraft and field teams on secure remote access and communications for systems operating with intermittent connectivity.
Test, monitor, and document security automation so other engineers can maintain it; simplify controls that create unnecessary alerts, exceptions, or recurring manual work.