Product Security Leader: SDLC, Crypto & Threat Modeling

Industrious Ventures; Torrance (CA); On-site; USD 180,000 - 240,000; Full time

Job summary

Northwood Space seeks a Senior Product Security Lead to own security across software and systems from design to deployment. This role is a senior technical leadership position managing threat modeling, secure architecture, and secure coding standards for mission‑critical space communications.

You will embed security into every stage of the software development lifecycle, drive application security programs, and collaborate with product and infrastructure teams to meet stringent government and

Qualifications

• 5+ years in product security, application security, or a closely related security engineering discipline.
• Deep expertise in SAST and DAST tooling, including integration into CI/CD pipelines.
• Hands-on experience coordinating penetration testing engagements and remediation validation.

Responsibilities

• Own security across the full software development lifecycle from design through production deployment.
• Lead threat modeling, secure architecture reviews, and development of secure coding standards.
• Oversee vulnerability management end-to-end: discovery, triage, remediation tracking, and reporting.
• Drive CI/CD security, secrets management, and infrastructure as code security controls.
• Collaborate with product, infrastructure, and compliance teams to meet FedRAMP, CMMC, and NIST 800-171 requirements.

Skills

SAST/DAST tooling

Penetration testing

Cryptography knowledge

Vulnerability management

CI/CD security

Secrets management (HashiCorp Vault)

IaC security & GitOps

Programming (Python, Go, Rust)

NIST/CMMC/FedRAMP familiarity

Top Secret clearance eligibility

Tools

HashiCorp Vault

Terraform

ArgoCD

Container security scanning

SBOM tooling

Job description

Northwood Space seeks a Senior Product Security Lead to own security across software and systems from design to deployment. This role is a senior technical leadership position managing threat modeling, secure architecture, and secure coding standards for mission‑critical space communications.

You will embed security into every stage of the software development lifecycle, drive application security programs, and collaborate with product and infrastructure teams to meet stringent government and