Embedded Security Architect: Cryptography & Secure Boot

Next Matter; Torrance (CA); On-site; USD 120,000 - 180,000; Full time

Job summary

Castelion is seeking a Software Security Engineer to architect cryptographic foundations that secure flight systems and embedded platforms. You will own encryption, code signing, secure boot, and key management across the full stack from manufacturing provisioning to flight operations, collaborating with embedded, avionics, and infrastructure teams.

Ideal candidates think in systems, understand threat models deeply, and translate cryptographic principles into practical, resilient implementations

Qualifications

• Bachelors degree in Computer Science, Computer Engineering, Electrical Engineering, or related STEM field.
• 3+ years of professional experience in software engineering with exposure to applied cryptography or security engineering.
• Experience implementing encryption, authentication, or digital signature systems in C, C++, Rust, or similar systems languages.
• Strong understanding of cryptographic fundamentals (PKI, TLS, key exchange, hashing, signatures).
• Experience working in Linux-based or embedded environments.

Responsibilities

• Secure Boot & Root of Trust: Design and implement secure boot chains, hardware-backed root of trust mechanisms, and firmware verification processes for embedded flight systems.
• Cryptography & Encryption: Develop and integrate cryptographic protocols and libraries (e.g., symmetric/asymmetric encryption, key exchange, digital signatures) for embedded and distributed systems.
• Code Signing & Update Security: Own software signing infrastructure and verification workflows to ensure authenticity and integrity of firmware, flight software, and field updates.
• Key Management & Provisioning: Design secure key generation, storage, rotation, and provisioning systems across development, manufacturing, and deployed environments.
• Secure Communications: Implement and review authenticated and encrypted communication channels between vehicle, ground systems, and internal subsystems.
• Threat Modeling & Hardening: Conduct threat modeling and security reviews across the software stack. Identify vulnerabilities and implement practical mitigations aligned with mission constraints.
• Cross-Functional Integration: Partner with embedded, avionics, hardware, and infrastructure teams to embed security principles into system architecture from initial design through deployment.

Skills

Applied cryptography

Security engineering

C/C++/Rust proficiency

Education

Bachelor's degree in Computer Science/Engineering or related STEM field

Tools

C

C++

Rust

Linux

Job description

Castelion is seeking a Software Security Engineer to architect cryptographic foundations that secure flight systems and embedded platforms. You will own encryption, code signing, secure boot, and key management across the full stack from manufacturing provisioning to flight operations, collaborating with embedded, avionics, and infrastructure teams.

Ideal candidates think in systems, understand threat models deeply, and translate cryptographic principles into practical, resilient implementations