Senior Platform Security Engineer, UAS

Mach Industries; Huntington Beach (CA); On-site; USD 150,000 - 175,000; Full time

Benefits offered by this job

Healthcare

Dental & Vision

Retirement savings

Paid time off

Professional development

Equity participation

Job summary

Mach Industries is seeking a Senior Platform Security Engineer to lead security across our growing UAS portfolio, securing hardware, firmware, and software-driven systems across edge, on-prem, and cloud. The role focuses on architecture, threat modeling, and secure deployment across the lifecycle.

You will collaborate with hardware, software, and firmware teams, implement secure CI/CD practices, and drive cross-functional security initiatives while influencing our security posture in a

Qualifications

• 5+ years in Product Security, Application Security, or Security Engineering.
• Proficient in Python, C/C++, Rust, or Go.
• Experience securing APIs, microservices, and distributed platforms.
• Experience with embedded systems, firmware, and Linux-based environments.
• Familiarity with CI/CD pipelines and DevSecOps practices.
• Able to assess vulnerabilities across software, network, and hardware-software boundaries.
• Experience delivering production-grade systems.
• Familiarity with NIST or similar security frameworks.
• Ability to own large initiatives independently.
• Eligible to obtain a U.S. Secret clearance.

Responsibilities

• Lead end-to-end product security across UAS platforms, including embedded systems, flight software, APIs, backend services, and cloud infrastructure.
• Design and implement secure architectures covering device identity, authentication, authorization, and data protection.
• Perform security assessments across software, firmware, and hardware, including application testing, code review, and adversarial analysis.
• Build and integrate security into CI/CD pipelines, including automated testing, scanning, and policy enforcement.
• Partner with software, hardware, and firmware teams to embed security into the development lifecycle.
• Secure communications, telemetry, and OTA update mechanisms across distributed systems.
• Develop security tooling to scale protection across multiple hardware platforms.
• Lead and mentor engineers and drive cross-functional security initiatives.

Skills

Product Security

Python

C/C++

Rust

Go

Security Assessments

Embedded Systems

CI/CD / DevSecOps

NIST Frameworks

Lead Initiatives

Secret Clearance Eligibility

Tools

Terraform

Job description

About Mach Industries

Founded in 2023, Mach Industries is a rapidly growing defense technology company focused on developing next-generation autonomous defense platforms. At the core of our mission is the commitment to delivering scalable, decentralized defense systems that enhance the strategic capabilities of the United States and its allies. With a workforce of approximately 350 employees, we operate with startup agility and ambition.

Founded in 2023, Mach Industries is a rapidly growing defense technology company focused on developing next-generation autonomous defense platforms. At the core of our mission is the commitment to delivering scalable, decentralized defense systems that enhance the strategic capabilities of the United States and its allies. With a workforce of approximately 350 employees, we operate with startup agility and ambition.

Our vision is to redefine the future of warfare through cutting-edge manufacturing, innovation at speed, and unwavering focus on national security. We are dedicated to solving the next generation of warfare with lethal systems that deter kinetic conflict and protect global security.

The Role

We are seeking a Senior Platform Security Engineer to lead security efforts across our growing Unmanned Aircraft Systems (UAS) portfolio. This role focuses on securing both hardware and increasingly software-driven systems, including autonomy platforms, command-and-control (C2) applications, APIs, cloud infrastructure, and embedded devices.

As our products scale and become more connected, the attack surface expands across edge, air, and cloud environments. This role ensures security is built into the full system lifecycle—from hardware and firmware to applications and distributed services.

Key Responsibilities

• Lead end-to-end product security across UAS platforms, including embedded systems, flight software, APIs, backend services, and cloud infrastructure.
• Design and implement secure architectures covering device identity, authentication, authorization, and data protection.
• Perform security assessments across software, firmware, and hardware, including application testing, code review, and adversarial analysis.
• Build and integrate security into CI/CD pipelines, including automated testing, scanning, and policy enforcement.
• Partner with software, hardware, and firmware teams to embed security into the development lifecycle.
• Secure communications, telemetry, and OTA update mechanisms across distributed systems.
• Develop security tooling to scale protection across multiple hardware platforms.
• Lead and mentor engineers and drive cross-functional security initiatives.

Required Qualifications

• 5+ years of experience in Product Security, Application Security, or Security Engineering.
• Programming skills in Python, C/C++, Rust, Go, or similar languages.
• Experience securing software systems including APIs, microservices, and distributed platforms.
• Experience with embedded systems, firmware, and Linux-based environments.
• Familiarity with CI/CD pipelines and DevSecOps practices.
• Ability to assess vulnerabilities across application, network, and hardware-software boundaries.
• Experience delivering production-grade systems.
• Familiarity with NIST or similar security frameworks.
• Ability to own large initiatives independently.
• Eligible to obtain a U.S. Secret clearance.

Preferred Qualifications

• Expertise in IOT/OT penetration testing.
• Experience in UAS, aerospace, robotics, or defense environments.
• Knowledge of distributed systems, cloud security, and edge-to-cloud architectures.
• Experience with AI/ML system security.
• Familiarity with RF communications and associated security considerations.
• Experience with FPGA or GPU-based systems.
• Experience with infrastructure-as-code tools such as Terraform.
• Proven track record leading engineering teams.

Additional Requirements

• Available to work extended hours and weekends as needed

ITAR Requirements

To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C.

• 1157, or (iv) Asylee under 8 U.S.C.
• 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here.

Senior

$150,000-$175,000 USD

Key Elements Of Our Compensation Philosophy

• Competitive Salaries: We continuously research market rates to ensure our salaries are competitive with those in our industry and geographic location.
• Performance-Based Incentives: Our bonus structure is tied to both individual and company performance, creating a win-win scenario that motivates our team members to excel.
• Equity Participation: We offer stock options or equity to employees, ensuring that you share in the success and growth of the company.
• Benefit Packages: Our benefits include healthcare, dental and vision plans, retirement savings, and paid time off, because we understand that your well-being extends beyond the office.
• Professional Development: We allocate funds for continuing education, training, and career growth.
• Transparency: We are committed to openness about our compensation tiers and how decisions are made, ensuring trust and mutual respect.

By joining Mach, you're not just accepting a job - you're becoming a key part of a team that values your contributions and invests in your growth. Together, we aim to create a rewarding environment that sets the stage for long-term success.

Data Privacy

To view Mach Industries candidate data privacy policy, please visit https://machindustries.com/privacy-policy.

Disclosures

This position may require access to information protected under U.S. export control laws and regulations, including the Export Administration Regulations (EAR) and the International Traffic in Arms Regulations (ITAR). Please note that any offer for employment may be conditioned on authorization to receive software or technology controlled under these U.S. export control laws and regulations without sponsorship for an export license.

Mach participates in E-Verify and will provide the federal government with your Form I-9 information to confirm that you are authorized to work in the U.S.

The salary range for this role is an estimate based on a wide range of compensation factors, inclusive of base salary only. Actual salary offers may vary based on (but not limited to) work experience, education and training, critical skills, and business considerations. Highly competitive equity grants are included in most offers and are considered part of Mach's total compensation package. Mach offers benefits such as health insurance, retirement plans, and opportunities for professional development.

Mach is an equal opportunity employer committed to creating a diverse and inclusive workplace. All qualified applicants will be treated with respect and receive equal consideration for employment without regard to race, color, creed, religion, sex, gender identity, sexual orientation, national origin, disability, uniform service, Veteran status, age, or any other protected characteristic per federal, state, or local law, including those with a criminal history, in a manner consistent with the requirements of applicable state and local laws.

If you'd like to defend the American way of life, please reach out!