Principal Software Security Engineer

3M HEALTHCARE; Littleton (CO); On-site; USD 150,000 - 200,000; Full time

Benefits offered by this job

Stock options

Cash incentives

401(k)

Paid vacation

Paid holidays

Parental leave

Employee discounts

Job summary

Rocket Lab is seeking a Principal Software Security Engineer to lead security architecture across hardware-software systems in Littleton, CO. You’ll secure embedded platforms, avionics, ground stations, and space vehicle infrastructure, shaping cyber-physical security and cross-functional reviews.

The role emphasizes RMF, NIST 800-53, DFARS/CMMC compliance, and DevSecOps integration, with a focus on aerospace standards and mission-critical software security.

Qualifications

• Bachelor's degree in CS, Information Security, or related field.
• 12+ years in Cybersecurity focusing on systems, embedded or infra security.
• Experience with hardware security principles (secure boot, TPM, HSM, side-channel).
• Experience securing embedded Linux, RTOS, or bare-metal systems.

Responsibilities

• Design security architectures for integrated hardware/software systems.
• Secure embedded systems, firmware, FPGA implementations, and interfaces.
• Develop security controls for satellite buses, payloads, and ground systems.
• Lead security reviews and mentor engineers on best practices.

Skills

Systems security

Embedded security

Cryptography implementation

Network security

Secure boot

Hardware security

Security leadership

Security accreditation

Active clearance / citizenship

DevSecOps integration

Education

Bachelor's degree in Computer Science / Information Security

Master's degree (nice to have)

Tools

Vivado

Quartus

HSM / secure hardware concepts

Job description

ABOUT ROCKET LAB

Rocket Lab is an end-to-end space company delivering responsive launch services, complete spacecraft design and manufacturing, payloads, satellite components, and more – all with the goal of opening access space. The rockets and satellites we build, and launch enable some of the most ambitious and vital space missions globally, supporting scientific exploration, Earth observation and missions to combat climate change, national security, and exciting new technology demonstrations.

Our Electron rockethas become the second most frequently launched U.S. rocket annually and has delivered more than 230 satellites to orbit, all while we work to develop Neutron, our upcoming medium-lift, reusable launch vehicle for larger constellation deployment. Our Space Systems business designs and builds our extensive line of satellites, payloads, and their components, including spacecraft that have been selected to support NASA missions to the Moon and Mars and components used on the James Webb Space Telescope.

SPACE SYSTEMS

At Rocket Lab, we’re not just launching rockets — we're building the future of space. Our Space Systems team builds everything from complete spacecraft, precision payloads to the components and subsystems that allow them to thrive in space, like solar panels, flight software, star trackers, optical systems, separation systems, radios, and more.

Our Space Systems team has enabled more than 1,700 missions, ranging from interplanetary exploration, in-space manufacturing to national security and defense initiatives. The team has built spacecraft, payloads, and components for missions to the Moon and Mars, working with partners including NASA, the Space Development Agency, and the U.S. Space Force.Whether it’s a single high-performance spacecraft, constellation, or the vertically integrated components that help them get to space — our world class Space Systems team is empowering some of the boldest and most ambitious space missions.

PRINCIPAL SOFTWARE SECURITY ENGINEER

Based out of Rocket Lab's site in Littleton, Co, we are seeking a Principal Software Security Engineer to lead security architecture and implementation across out integrated hardware-software systems. This role focuses on securing complex cyber-physical systems including embedded platforms, avionics, ground stations, and space vehicle infrastructure.

WHAT YOU'LL GET TO DO :

Systems Security Architecture

• Design and implement security architectures for integrated hardware/software systems
• Secure embedded systems, firmware, FPGA implementations, and hardware interfaces
• Develop security controls for satellite buses, payload systems, and ground segment infrastructure
• Conduct hardware security assessments including supply chain risk analysis and component-level security

Cyber-Physical Security

• Establish security requirements for RF communications, telemetry, and command systems
• Implement cryptographic key management for space and ground systems
• Secure network infrastructure, including air-gapped and classified environments
• Design secure boot chains, trusted execution environments, and hardware root of trust implementations

Technical Leadership

• Lead cross-functional security reviews involving hardware, firmware, and software teams
• Mentor engineers on systems security best practices across the full stack
• Drive security integration into DevSecOps pipelines and hardware development
• Interface with government customers on security accreditation requirements (RMF, ICD 503, NIST 800-53)

Compliance & Risk Management

• Ensure compliance with DFARS, CMMC, ITAR, and aerospace security standards
• Conduct threat modeling for hardware/software attack surfaces
• Perform security risk assessments for mission critical systems
• Support security certification and accreditation activities

YOU’LL BRING THESE QUALIFICATIONS:

• Bachelor's degree in Computer Science, Information Security, or a related field
• 12+ years of experience in Cybersecurity with focus on systems, embedded or infrastructure security
• Experience with hardware security principles (secure boot, TPM, HSM, side-channel attacks)
• Experience securing embedded Linux, RTOS, or bare-metal systems
• Demonstrated knowledge of cryptography implementation in resource-constrained environments
• Expertise in network security, including air-gapped architectures and secure enclaves
• Active Secret clearance, or ability to obtain and maintain one
• U.S. citizenship is required, due to program requirements

THESE QUALIFICATIONS WOULD BE NICE TO HAVE:

• Master's degree in Computer Science, Information Security, or related field
• Active TS/SCI clearance
• Experience with aerospace, defense, or space systems security
• Knowledge of satellite communication protocols and RF security
• Familiarity with DO-178C, DO-254, or similar safety-critical development standards
• Hardware reverse engineering or penetration testing experience
• Certifications: CISSP, GIAC (GPEN, GXPN), CEH, or equivalent
• Experience with FPGA security or hardware design tools (Vivavo, Quartus)

ADDITIONAL REQUIREMENTS:

• Specific vision abilities required by this job include close vision, distance vision, peripheral vision, depth perception, and the ability to focus
• Regularly required to sit, use hands and fingers, operate computer keyboard and controls, and communicate verbally and in writing
• Must be physically able to commute to buildings
• Occasional exposure to dust, fumes and moderate levels of noise

The expected salary range for the position is displayed in accordance with the Colorado Equal Pay for Equal Work Act. Final agreed upon compensation is based upon individual qualifications and experience.
Base salary is only one part of Rocket Lab’s compensation package for this role.

• You may be eligible for company stock, or cash incentives, and can purchase discounted stock through Rocket Lab’s Employee Stock Purchase Program.
• Employee benefits also include medical, dental, and vision insurance coverage
• 401(k) retirement plan options
• paid vacation, holidays, and sick leave
• paid parental leave
• other discounts and perks

Base Pay Range (CO Only)

$150,000—$200,000 USD

WHAT TO EXPECT

We’re on a mission to unlock the potential of space to improve life on Earth, but that’s not an easy task. It takes hard work, determination, relentless innovation, teamwork, grit, and an unwavering commitment to achieving what others often deem impossible. Our people out-think, out-work and out-pace. We pride ourselves on having each other’s backs, checking our egos at the door, and rolling up our sleeves on all tasks big and small. We thrive under pressure, work to tight deadlines, and our focus is always on how we can deliver, rather than dwelling on the challenges that stand in the way.

Important information:

FOR CANDIDATES SEEKING TO WORK IN US OFFICES ONLY:

To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR), Rocket Lab Employees must be a U.S. citizen, lawful U.S. permanent resident (i.e., current Green Card holder), or lawfully admitted into the U.S. as a refugee or granted asylum, or be eligible to obtain the required authorizations from the U.S. Department of State and/or the U.S. Department of Commerce, as applicable. Learn more about ITAR

Rocket Lab provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. This policy applies to all terms and conditions of employment at Rocket Lab, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.

Applicants requiring a reasonable accommodation for the application/interview process for a job in the United States should contact Giulia Johnson at [e-mail]. This dedicated resource is intended solely to assist job seekers with disabilities whose disability prevents them from being able to apply/interview. Only messages left for this purpose will be considered. A response to your request may take up to two business days.

FOR CANDIDATES SEEKING TO WORK IN NEW ZEALAND OFFICES ONLY:

For security reasons background checks will be undertaken prior to any employment offers being made to an applicant. These checks will include nationality checks as it is a requirement of this position that you be eligible to access equipment and data regulated by the United States' International Traffic in Arms Regulations.

Under these Regulations, you may be ineligible for this role if you hold citizenship of Australia, Japan, New Zealand, Switzerland, the European Union or a country that is part of NATO, or if you hold ineligible dual citizenship or nationality. For more information on these Regulations, click here ITAR Regulations.