Senior Product Security Engineer (Applications)
Astranis
$180,000 - $285,000 / year
Need a reasonable accommodation to apply or interview? Contact us.
JobMinglr uses automated technology to recommend jobs based on profile information and job preferences. Match Score does not determine eligibility for a position, prevent a user from viewing or applying to a job, or make hiring decisions on behalf of an employer.
Description
Astranis builds advanced satellites for high orbits, expanding humanity’s reach into the solar system. Today, Astranis satellites provide dedicated, secure networks to highly-sophisticated customers across the globe— large enterprises, sovereign governments, and the US military. With five satellites on orbit and many more set to launch soon, the company is servicing a backlog of more than $1 billion of commercial contracts.
Astranis is the preferred satellite communications partner for buyers with stringent requirements for uptime, data security, network visibility, and customization. Astranis has raised over $750 million from some of the world’s best investors, from Andreessen Horowitz to Blackrock and Fidelity, and employs a team of 450 engineers and entrepreneurs. Astranis designs, builds, and operates its satellites out of its 153,000 sq. ft. headquarters in Northern California, USA.
Senior Product Security Engineer
As a Senior Product Security Engineer, you will help secure both the software and embedded components that power our systems. This hybrid role focuses primarily on product/application security while contributing to embedded security reviews where software and hardware intersect. You will guide secure design, evaluate critical components, and partner closely with engineering teams across the stack to ensure our products are secure by default. This role does not expect deep hardware hacking but requires a broad security mindset to provide expertise where embedded systems and software meet.
Role
- Lead threat modeling, architecture reviews, and design-level risk assessments for both application and embedded system components.
- Conduct secure code reviews for critical modules in Python and C/C++, supporting secure coding practices across all engineering teams.
- Evaluate cryptographic usage, authentication/authorization flows, and protocol security across the stack.
- Identify and prioritize vulnerabilities in software and firmware; partner with developers on remediation and mitigation strategies.
- Participate in security assessments of embedded devices, especially where software interfaces with hardware.
- Provide security input on high-level aspects of secure boot, firmware update integrity, and device identity mechanisms.
- Partner with software, firmware, hardware, and systems teams to implement consistent, secure solutions.
Requirements
- 5+ years of experience in software engineering with a focus on security.
- Strong investigative, analytical problem-solving skills and attention to detail.
- Experience with secure architecture design and threat modeling for complex systems (including both web services and IoT/embedded devices).
- Software development and security expertise in both high-level languages (e.g., Python) and low-level languages (e.g., C, C++).
- Experience with security best practices for web applications (OWASP Top 10) and familiarity with embedded security concepts (e.g., secure boot, JTAG, UART).
- Proven ability in auditing code for security flaws across different technology stacks.
- Strong knowledge of security best practices, applied cryptography, and security frameworks.
- Strong communication skills, with the ability to discuss security with both software and hardware engineers.
- Ability to work collaboratively within a multi-disciplinary team environment.
Base pay is just one component of Astranis’s total rewards package. Your compensation also includes a significant equity package via incentive stock options, high-quality company-subsidized healthcare, disability and life insurance, 401(k) retirement planning, flexible PTO, and free on-site catered meals.
SMS Terms of Service
1. When you opt in to receive SMS messages from Astranis Space Technologies Corp., we may send you messages related to your job application, including updates, interview coordination, and other recruiting communications.
2. You can cancel the SMS service at any time by replying with any of the following industry standard keywords:
a. STOP
b. STOPALL
c. OPTOUT
d. CANCEL
e. END
f. QUIT
g. UNSUBSCRIBE
h. REVOKE
3. After you opt out, we may send one final text message confirming that you have been unsubscribed. No further recruiting SMS messages will be sent unless you opt in again.
4. To opt back in, reply with any of the following industry standard keywords:
a. START
b. UNSTOP
c. YES
5. For help, reply HELP or contact us at EMAIL or PHONE NUMBER.
6. Carriers are not liable for delayed or undelivered messages.
7. Message and data rates may apply. Message frequency may vary. Contact your wireless provider for details.
8. For more information on how we handle your data, please review our Privacy Policy at: https://www.astranis.com/legal/privacy.
Benefits
- 401(k)
- paid time off
- stock options
- life insurance
About this role
Astranis operates satellites serving governments and enterprises with demanding security requirements, and this role sits at the intersection of their software and embedded systems security. As a Senior Product Security Engineer, you'd own threat modeling and architecture reviews across both application and firmware layers, conduct code audits in Python and C/C++, and evaluate cryptographic implementations and device security mechanisms. The work spans from high-level secure design guidance to hands-on security assessments where software meets hardware—though it doesn't require deep hardware hacking expertise.
You'd need at least five years in software security with demonstrated experience in threat modeling for complex systems, secure code review across multiple languages, and familiarity with both web application security (OWASP) and embedded concepts like secure boot and firmware integrity. Strong analytical skills, cryptography knowledge, and the ability to communicate security trade-offs across diverse engineering teams are essential. This is a hybrid position in San Francisco with a base salary of $180,000–$285,000, plus equity, benefits, and on-site meals. U.S. citizenship or lawful permanent residency is required due to export regulations on space technology.
How this employer is doing
solid
- News: Recently Raised Funding
- Hiring Mentioned
- Recently Raised Funding
In the news
Astranis Hires Dentons for Defense Spending Lobbying, Legis1
This role's local market on JobMinglr
Pay for this role
$180,000 to $285,000 per year
That is the employer's posted range, and where you land in it is usually decided in one conversation. Before that conversation, run the numbers: analyze an offer for this role.
Before you apply, worth reading
How JobMinglr reads this job
Every listing here is scored against your profile before you apply: skills overlap, experience level, location and work arrangement, each weighted and explained. You see the score and the reasons, not just a list. How the matching works.