Senior Product Security Engineer — Apps & Embedded Security

Astranis; San Francisco (CA); Hybrid; USD 180,000 - 285,000; Full time

Benefits offered by this job

Equity

Health insurance

401(k)

Flexible PTO

On-site meals

Job summary

Astranis seeks a Senior Product Security Engineer focusing on applications to secure software and embedded components powering our systems. The role blends product and embedded security, requiring collaboration with engineering teams across the stack to keep our products secure by default.

You will drive secure design, evaluate critical components, and guide security practices for both web services and IoT devices in a hybrid work setup.

Qualifications

• 5+ years of software engineering experience with a focus on security.
• Experience designing secure architectures and performing threat modeling for complex systems (web services and IoT/embedded).
• Proficiency in Python and C/C++ for secure coding and reviews.
• Knowledge of OWASP Top 10 and embedded security concepts (secure boot, JTAG, UART).
• Proven ability to audit code for security flaws across stacks.
• Strong communication skills to discuss security with software and hardware engineers.

Responsibilities

• Lead threat modeling, architecture reviews, and design-level risk assessments for application and embedded components.
• Conduct secure code reviews for Python and C/C++, promoting secure coding practices.
• Evaluate cryptographic usage, authentication/authorization, and protocol security across the stack.
• Identify and prioritize vulnerabilities in software and firmware; collaborate on fixes.
• Participate in security assessments of embedded devices where software interfaces with hardware.
• Provide security input on secure boot, firmware integrity, and device identity mechanisms.
• Partner with software, firmware, hardware, and systems teams to implement secure solutions.

Skills

Python

C/C++

Threat modeling

Secure code review

Web security

Embedded security

Auditing

Cryptography

Communication

Collaboration

Job description

Astranis seeks a Senior Product Security Engineer focusing on applications to secure software and embedded components powering our systems. The role blends product and embedded security, requiring collaboration with engineering teams across the stack to keep our products secure by default.

You will drive secure design, evaluate critical components, and guide security practices for both web services and IoT devices in a hybrid work setup.