Staff Platform Security Engineer

Firestorm•San Diego, CA

9d•$175,000 - $195,000•Onsite

About The Position

Firestorm is hiring a hands-on Staff Platform Security Engineer to build and improve the security systems behind Crucible, its manufacturing-network software, and Firestorm's software infrastructure. Crucible operates across cloud, factory, edge, and air-gapped environments, creating security challenges that must be addressed in the product and infrastructure themselves. The engineer will work directly with software and infrastructure teams to implement platform security, harden deployments, automate controls, and support deployment into accredited environments. The role involves writing code, building infrastructure, reviewing system designs, and working with teams to remediate security problems. It is based in San Diego, California; local candidates and those open to relocating are welcome, and relocation assistance may be included in the offer package where appropriate.

Requirements

U.S. citizenship and ability to obtain and maintain a U.S. Government security clearance.
8 or more years of security engineering, platform security, product security, or cloud security experience, with a proven track record of success.
Strong software engineering skills and experience contributing directly to production code.
Strong Linux, networking, and cloud security fundamentals.
Deep experience securing Kubernetes, containers, and cloud infrastructure.
Strong experience with identity and access management, authentication, authorization, secrets management, and PKI.
Experience with application and platform threat modeling, security architecture, and vulnerability remediation.
Experience building security automation into CI/CD, infrastructure, and deployment workflows.
Experience with software supply chain security, including dependency management, artifact integrity, signing, or provenance.
Demonstrated ability to design and implement security solutions across application, infrastructure, and deployment boundaries.

Nice To Haves

Experience securing air-gapped, edge, or intermittently connected systems.
Experience with NIST 800-53, RMF, ATO, or similar accreditation processes.
Experience with AWS GovCloud or other regulated cloud environments.
Aerospace, defense, robotics, or other regulated-industry experience.

Responsibilities

Own security improvements from design through implementation across Crucible, cloud infrastructure, and edge deployments.
Implement authentication, authorization, secrets management, data protection, and system boundaries in product and infrastructure code.
Harden Kubernetes, cloud infrastructure, Linux systems, and air-gapped environments.
Build approaches for user, service, workload, and device identity across connected and disconnected deployments.
Improve software supply chain security, including dependency security, artifact integrity, signing, provenance, and deployment controls.
Threat model systems, review designs and code, identify vulnerabilities, and drive remediation.
Build security checks and tooling into CI/CD, infrastructure, and development workflows.
Translate security requirements into implemented controls, technical evidence, and system designs that support ATO and customer security requirements.
Write code, build infrastructure, review system designs, and work directly with teams to fix security problems.

Benefits

Comprehensive medical, dental, and vision plans.
401(k) Retirement Savings Plan.
Equity grants for new hires.
Unlimited PTO.
Generous company holiday calendar, including a holiday hiatus in July and December.
Generous parental leave.
Lifestyle Spending Account.
FSA, DCFSA, and HSA.
Hospital indemnity insurance.
Critical illness insurance.
Accident insurance.
Basic life/AD&D and short-term and long-term disability insurance, fully covered by Firestorm; additional life insurance is available for purchase.
Free 24/7 mental health resources, including therapy.
Work-life services, including free legal and financial support.
Relocation assistance may be included in the offer package where appropriate.