Security Engineer

Air space Intelligence, Inc.; Boston (MA); On-site; USD 200,000 - 275,000; Full time

Job summary

Automatic Systems, Inc. (ASI) is hiring a Security Engineer to harden and maintain cloud and software environments, ensuring compliance with U.S. government standards. You will work across AWS GovCloud and GCC High, aligning with NIST and CMMC requirements.

You will lead threat modeling, vulnerability remediation, and secure SDLC collaboration with product, Platform, and compliance teams, including incident response support as needed.

Qualifications

• Hardening and maintaining cloud and endpoint environments to meet U.S. government security standards.
• Implement security controls across CI/CD pipelines and cloud-native services.
• Lead threat modeling and security design reviews using standard methodologies.
• Establish and enforce secure software development lifecycle practices.
• Experience securing government cloud environments (AWS GovCloud).

Responsibilities

• Harden and maintain ASI's cloud and endpoint environments.
• Ensure compliance with NIST 800-171/CMMC and NIST 800-53.
• Collaborate with product, Platform, and compliance teams to embed security in the SDLC.
• Assist in incident response and post-incident reviews as needed.

Skills

Python

Rust

Kubernetes

Image hardening

Vulnerability scanning

SBOM

Dependency management

Threat modeling

Terragrunt

Terraform

CMMC

NIST 800-53

FedRAMP

AWS GovCloud

GuardDuty

Security Hub

Microsoft Sentinel

Splunk

SIEM

SDLC security

Tools

Terraform

Terragrunt

Kubernetes

AWS GovCloud

Microsoft Sentinel

Job description

Compensation

$200K – $275K ASI is dedicated to maintaining fair and equitable compensation practices. The salary range provided for this role reflects the minimum and maximum cash compensation targets for candidates across all U.S. locations and levels of expertise/experience. Additionally, all employees receive generous equity packages and have access to a comprehensive benefits offering. Actual compensation packages are determined based on relevant skills, experience, education and training.

About

ASI is the frontier AI company that dynamically orchestrates critical infrastructure and defense assets, across air traffic control, energy, logistics, and combat operations. ASI's systems simulate physical operations, hours, days, and weeks ahead, so the people running air traffic control, the electric grid, and military operations can catch problems early and act before they spread. ASI is powering vital infrastructure for customers like United Airlines, National Grid, the Federal Aviation Administration, Delta Air Lines and the Department of War. ASI is headquartered in Boston with offices in Washington, DC, Denver, and Europe, and is backed by leading investors, including Andreessen Horowitz, Citadel Securities, and Spark Capital.

What You Will Do

Air Space Intelligence is building mission-critical, secure infrastructure for defense and intelligence applications. We are seeking a Security Engineer to harden and maintain cloud and software environments, ensuring compliance with U.S. government security standards. As a Security Engineer, you will help harden and maintain ASI's cloud and endpoint environment (AWS GovCloud and Microsoft GCC High) while supporting compliance with U.S. government security standards (e.g., NIST 800-171/CMMC and NIST 800-53).

What We Value

• Demonstrated coding skills in Python/Rust
• Knowledge of container and CI/CD security (Kubernetes, image hardening, vulnerability scanning)
• Investigate & remediate vulnerabilities, escalating complex issues when needed
• Supply chain security experience (SBOM, artifact generation, dependency management)
• Lead threat modeling sessions using established industry methodologies (e.g., STRIDE, PASTA, etc.)
• Demonstrated skills in Infrastructure as a code (Terragrunt/Terraform).
• Practical exposure to federal security frameworks (CMMC, NIST 800-53, FedRAMP).
• Experience securing government cloud environments (AWS GovCloud), ensuring compliance with federal security requirements.
• Hands-on experience with cloud-native incident alerting services (e.g., AWS GuardDuty/Security Hub, Azure Defender, etc.)
• Automate configuration management, patching, and policy enforcement for networks, servers, and endpoints
• Monitor security events using SIEM tools (Microsoft Sentinel, Splunk)
• Collaborate with product, Platform, and compliance teams to embed security in the SDLC
• Support incident response and post-incident review, growing toward leading these efforts over time

How we hire

We view the interview process not as a screening or test, but rather as an opportunity to simulate what it would be like working together. We build the interview process around you.

ADDITIONAL REQUIREMENTS

• Security Clearance: Must be eligible to obtain DoD clearance.
• Citizenship: U.S. citizenship is required for this position.
• On-Site Presence: Ability to work in our Boston (BOS) office at least three days per week