Lead Security Engineering - Terminals

Logos Space; San Diego (CA); On-site; USD 220,000 - 280,000; Full time

Job summary

Logos Space is seeking a Lead Security Engineer - Terminals to own end-to-end security for ground-based terminals. You will shape the security architecture of RF/datalink, baseband and firmware, ensuring tamper resistance and secure provisioning across production.

The role demands 7–10 years in security engineering for embedded hardware, strong C/C++/Rust and Python skills, and a drive to mentor engineers. A Top Secret clearance may be pursued as needed.

Qualifications

• Bachelor's degree in CS, EE, cybersecurity or related field (Master's preferred).
• 7–10 years in security engineering for embedded hardware.
• Proficiency in C/C++/Rust and Python.

Responsibilities

• Define end-to-end security design for ground terminals.
• Design RF datalink security and secure wireless protocols.
• Threat model terminal hardware, mmWave, baseband subsystems and SW interfaces.
• Implement secure provisioning and key injection for terminal hardware.
• Ensure compliance with FIPS, Common Criteria, CSfC standards.
• Oversee secure boot, firmware security and cryptographic lifecycle management.
• Collaborate with Hardware and RAN Stack teams to embed controls.
• Provide technical leadership and mentor security engineers.
• Potentially build a team and guide manufacturing security.

Skills

Embedded security

RF datalink security

Threat modeling

Compliance standards

Manufacturing security

C/C++/Rust

Python

Education

B.S. in CS/EE/C cybersecurity

M.S. preferred

Tools

N/A

Job description

Logos Space is a Low Earth Orbit (LEO) satellite system purpose-built to serve the connectivity needs of the commercial enterprise users and government users. We will help fill an important gap in the market, providing resilient, high-performance satellite-based connectivity services to enterprise and government customers worldwide. Business customers have contracts with agreed-upon performance standards for their broadband, and Logos will build these capabilities into the system from the beginning. Speed and reliability are the foundation of the system. Logos is designed to extend cloud and data center network connectivity anywhere in the world to fixed, seaborne, and airborne terminals. Logos is led by a team of highly experienced engineers with proven track records in the networking and satellite industries. We are seeking engineers who can thrive in a fast-moving environment, comfortable taking vague design ideas and turning them into concrete, testable architecture and secure solutions.

About Logos Space Engineering

The Product and Data Link Security team at Logos Space Engineering is responsible for ensuring the success of our network by providing unique levels of security and authentication in space communications. This position is a critical driver of the architecture, overseeing development efforts specific to the security architecture, as well as working with other teams like ground segment and spacecraft systems.

The Role

The Lead Security Engineering - Terminals will have technical ownership of the end-to-end security design and delivery of our novel ground-based terminals. This role is responsible for the security architecture of terminal systems including mmWave apertures, complex RF and switching subsystems, and baseband hardware. You will ensure embedded security and secure wireless communication for the ground segment, defining and enforcing the security guardrails for what Logos procures and manufactures.

Key Responsibilities

• Develop and maintain a comprehensive security strategy and roadmap for ground-based terminal hardware and software interfaces.
• Design and implement RF-related datalink security and secure wireless communication protocols for terminals.
• Conduct thorough threat modeling across terminal hardware components, including mmWave and baseband subsystems, and low-level software interfaces.
• Lead the design and implementation of secure provisioning workflows and key injection for terminal hardware components.
• Ensure alignment with cryptographic standards such as FIPS for terminal security modules.
• Oversee manufacturing security and manage the chain of custody for terminal production to prevent tampering.
• Collaborate with Terminal Hardware and RAN Stack teams to integrate security controls into the terminal architecture.
• Provide technical guidance and mentorship to security engineers, contributing to the overall growth of the security organization.
• Oversee secure boot, firmware security, cryptographic lifecycle management, anti-tampering, aecure onboarding for the terminal systems.
• Note: This will be a hands-on role with a scope to potentially build a team.

Basic Qualifications

• Bachelor's degree in Computer Science, Electrical Engineering, Cybersecurity, or a related field (Master's degree preferred).
• Minimum of 7-10 years of experience in security engineering, with demonstrable experience in designing and implementing security solutions for embedded systems or complex hardware.
• Ability to program in C/C++/Rust and scripting languages like Python.
• Strong knowledge of security principles, best practices, and frameworks (e.g., Zero Trust, defense-in-depth).
• Excellent analytical, problem-solving, and troubleshooting skills.
• Ability to work independently and as part of a collaborative team in a fast-moving environment.

Must-Have Skills

• Embedded security for ground terminals, network security
• RF related datalink security and secure wireless communication
• Threat modeling across terminal hardware and software interfaces
• Compliance experience with standards like FIPS, Common Criteria, CSfC
• Good knowledge of manufacturing security and secure provisioning for terminal hardware

Preferred Qualifications

• Experience with mmWave apertures, RF/baseband subsystems, and SDR MAC/PHY interactions.
• Relevant security certifications such as CISSP, CISM, or equivalent.
• Experience with automation for hardware security testing tasks.
• Ability and willingness to attain a Top Secret Clearance.
• Experience with 4G/5G RAN systems, wireless infrastructure, SATCOM security, PDCP, IPSEC or MACSEC.

Compensation Range: $220K - $280K