Lead Software Engineer, Security (Multiple Seniority Levels)

📋 Description

• • Architect bullet-proof security for an AI flight-safety platform that already protects aircraft for the U.S. Department of Defense and three major airlines. You will own the full stack—from cloud infrastructure to cockpit endpoints—designing zero-trust architectures that keep adversaries out and aviators safe.
• • Own vulnerability management end-to-end: schedule and execute continuous scans, red-team exercises, and penetration tests; triage findings; and push fixes into production within hours, not weeks. Every patch you ship directly impacts the safety of thousands of daily flights.
• • Build and maintain the security backbone for multi-tenant SaaS and on-prem deployments that handle classified mission data. Implement encryption at rest and in transit, key rotation, and hardware-backed secrets management that satisfy both FedRAMP High and IL5 controls.
• • Lead incident-response war rooms when threats emerge. You’ll define playbooks, run tabletop drills, and coordinate cross-functional teams to contain, eradicate, and document incidents. Post-mortems become learning loops that harden the platform faster than attackers can pivot.
• • Embed security into the SDLC by writing threat models for every new feature, automating static and dynamic analysis in CI/CD, and coaching engineers on secure-coding practices. Your guardrails will let developers ship at startup speed without ever compromising safety.
• • Ensure continuous compliance with NIST 800-53, CMMC, ISO 27001, and aviation-specific standards such as DO-326A. You will map controls to code, generate evidence packages, and shepherd third-party audits to on-time, drama-free certifications.
• • Design and operate real-time monitoring, logging, and SIEM pipelines that surface anomalies across AWS, on-prem clusters, and aircraft hardware. Tune detection rules so that false positives don’t desensitize operators and real threats never slip through.
• • Secure the entire physical and digital perimeter: office networks, aircraft interfaces, employee laptops, mobile devices, and third-party vendor integrations. You’ll select and deploy EDR, MFA, and network micro-segmentation solutions that scale from 50 to 5,000 endpoints.
• • Create crisp, actionable security documentation—policies, runbooks, architecture diagrams—that regulators love and engineers actually read. Maintain a living risk register that quantifies threats and drives prioritization for leadership and investors.
• • Evangelize a security-first culture. Run phishing simulations, lunch-and-learns, and capture-the-flag events that turn every employee into an extra layer of defense. Celebrate wins publicly so that security feels like a shared mission, not a roadblock.
• • Evaluate and onboard new vendors, aircraft suppliers, and data partners. You’ll review SOC 2 reports, negotiate security addenda, and conduct on-site assessments to ensure every link in the supply chain meets Beacon AI’s uncompromising bar.
• • Stay ahead of emerging threats—AI-driven malware, ADS-B spoofing, satellite link jamming—and prototype countermeasures before adversaries weaponize them. Publish research and contribute to industry working groups that shape the future of aviation cybersecurity.
• • Mentor junior security engineers and champion diversity in cybersecurity. Your leadership will multiply the team’s impact and establish Beacon AI as the employer of choice for mission-driven security talent.