Embedded Flight Security Engineer: Cryptography & Secure Boot

Castelion Corporation; Torrance (CA); Hybrid; USD 120,000 - 180,000; Full time

Job summary

Castelion is seeking a Software Security Engineer to build cryptographic foundations securing flight systems. You will own encryption, code signing, secure boot, and key management across embedded platforms, ensuring integrity, authenticity, and confidentiality of mission-critical software.

You will collaborate with embedded, avionics, and infrastructure teams to embed security across the full stack from manufacturing provisioning to flight operations.

Qualifications

• Bachelor's degree in CS/CE/EE or related STEM field.
• 3+ years of professional software engineering with exposure to cryptography or security engineering.
• Experience implementing encryption, authentication, or digital signatures in C, C++, Rust.
• Strong understanding of cryptographic fundamentals (PKI, TLS, key exchange, hashing, signatures).
• Experience working in Linux-based or embedded environments.
• Experience with secure boot or hardware root-of-trust mechanisms is a plus.

Responsibilities

• Design secure boot chains and hardware-backed root of trust mechanisms.
• Develop cryptographic protocols and libraries for embedded and distributed systems.
• Own software signing infrastructure and verification workflows for firmware and flight software.
• Design secure key generation, storage, rotation, and provisioning across environments.
• Implement authenticated and encrypted communications between vehicle and ground systems.
• Conduct threat modeling and security reviews across the software stack.
• Collaborate with cross-functional teams to embed security from design to deployment.

Skills

Cryptography basics

Security engineering

C/C++/Rust

Linux/embedded

Threat modeling

Education

B.S. in CS/CE/EE

Tools

Code signing pipelines

TPMs / HSMs

Job description

Castelion is seeking a Software Security Engineer to build cryptographic foundations securing flight systems. You will own encryption, code signing, secure boot, and key management across embedded platforms, ensuring integrity, authenticity, and confidentiality of mission-critical software.

You will collaborate with embedded, avionics, and infrastructure teams to embed security across the full stack from manufacturing provisioning to flight operations.