Sr. Security Engineer

Rainmaker Technology Corporation; El Segundo (CA); On-site; USD 150,000 - 190,000; Full time

Benefits offered by this job

Stock options

Health, dental, vision insurance for你

401(k) with employer matching

Unlimited PTO and holidays

Parental leave for both parents

Daily lunch at El Segundo HQ

Relocation assistance

Job summary

Rainmaker is hiring a Sr. Security Engineer to embed security into software, hardware, and field operations. You will write production code and design secure defaults across AWS, applications, and company systems, protecting data and aircraft/field systems. You’ll automate controls, test thoroughly, and keep workflows secure and usable.

You’ll partner with engineers to test, operate, and improve systems while maintaining clear audit trails and recovery paths across the organization.

Qualifications

• Experience building and maintaining security automation in production with measurable risk reductions.
• Strong software engineering skills in Python, TypeScript, or similar, including testing and deployment.
• Hands-on cloud security experience turning access policies, network boundaries, and logging into reusable infrastructure as code.
• Understanding of application security, authentication, authorization, secrets management, and web/API vulnerabilities.
• Experience investigating security findings and carrying fixes to deployment and verification.
• Sound judgment on risk, reliability, and maintenance costs; prefer simple, effective controls.
• Ability to work independently and communicate clearly across teams.

Responsibilities

• Map critical systems, data flows, and access paths; translate risks into an actionable plan.
• Build reusable, secure-by-default AWS infrastructure with platform engineers (least-privilege, boundaries, logging).
• Review designs and code; build authentication/authorization patterns; fix vulnerabilities at source.
• Automate access provisioning, revocation, secrets management, and rotation with audit trails.
• Integrate security checks into CI/CD to catch exposed secrets and unsafe configurations before release.
• Develop detections and automate evidence gathering; test incident response with system owners.
• Secure Google Workspace and device configurations; assist onboarding/offboarding.
• Collaborate with aircraft and field teams on secure remote access for intermittent connectivity.
• Document and test security automation; simplify controls to reduce alerts and manual work.

Skills

Security automation

Python

TypeScript

Cloud security

App security

Incident response

Independent worker

Tools

AWS

Pulumi

Terraform

GitHub

Buildkite

Tailscale

WireGuard

Job description

Make it rain. Make Snow. Make Earth Habitable.

Rainmaker builds and deploys audacious technologies that work with nature to create an abundant, habitable planet. We are modernizing proven cloud-seeding science with weather-resistant UAS, radar and satellite observations, numerical weather prediction, novel sensing and validation systems, and sustainable seeding technologies. We are building an integrated system to make more freshwater available to farms, ecosystems, and communities.

Our ambition is bold, but we pursue it with humility. We take on difficult problems in the real world with technical rigor, grit, integrity, and an openness to learning and course-correcting. We are hiring individuals with evidence of exceptional ability. If you want to build systems that endure, restore and deliver the future we were promised, we want to hear from you.

Make it rain. Make Snow. Make Earth Habitable.

Rainmaker builds and deploys audacious technologies that work with nature to create an abundant, habitable planet. We are modernizing proven cloud-seeding science with weather-resistant UAS, radar and satellite observations, numerical weather prediction, novel sensing and validation systems, and sustainable seeding technologies. We are building an integrated system to make more freshwater available to farms, ecosystems, and communities.

Our ambition is bold, but we pursue it with humility. We take on difficult problems in the real world with technical rigor, grit, integrity, and an openness to learning and course-correcting. We are hiring individuals with evidence of exceptional ability. If you want to build systems that endure, restore, and deliver the future we were promised, we want to hear from you.

Engineering builds the software, infrastructure, and aircraft systems that power Rainmaker’s cloud-seeding operations. We work with scientists and field operators to turn weather data into reliable systems that help make more freshwater available.

About the Role

• Rainmaker is hiring a Sr. Security Engineer to build security into how we develop software and hardware, and how we run field operations. You’ll write production code and design secure defaults across AWS, our applications, and company systems, protecting scientific data and the systems our aircraft and field teams depend on. You’ll automate routine controls and checks, reducing recurring manual work as the company grows. You’ll work closely with engineers to test, operate, and improve the systems you build while keeping secure workflows straightforward to use.

What You’ll Do

• Map critical systems, data flows, and access paths, then turn the highest-priority risks into a practical plan.

• Build reusable, secure-by-default AWS infrastructure with platform engineers, including least-privilege access, network boundaries, and logging for scientific and operational systems.

• Review application designs and code, build reusable authentication and authorization patterns, and fix vulnerabilities at their source.

• Automate access provisioning and revocation, secrets management, and credential rotation across production and company systems, with clear audit trails and recovery paths.

• Build security checks into development and deployment workflows to catch exposed secrets, vulnerable dependencies, and unsafe configuration changes before release.

• Build useful detections and automate evidence gathering for investigations. Work with system owners to test incident response and recovery.

• Make Google Workspace and device configurations secure by default, working with People and Operations to make onboarding and offboarding reliable and easy to use.

• Partner with aircraft and field teams on secure remote access and communications for systems that operate with intermittent connectivity.

• Test, monitor, and document security automation so other engineers can maintain it. Simplify controls that create unnecessary alerts, exceptions, or recurring manual work.

What We’re Looking For

• Experience building and maintaining security automation in production. You can show what risk it reduced, how you tested it, how failures are handled, and what manual work it eliminated.

• Strong software engineering skills in Python, TypeScript, or a similar language, including testing, code review, deployment, and operating what you build.

• Hands-on cloud security experience, with the ability to turn access policies, network boundaries, and logging requirements into reusable infrastructure as code.

• Practical understanding of application security, authentication, authorization, secrets management, and common web and API vulnerabilities.

• Experience investigating security findings and carrying fixes through to deployment and verification.

• Sound judgment about risk, reliability, and maintenance costs. You can choose a simple, effective control and explain what should happen now versus later.

• Ability to work independently, communicate clearly with engineers and non-engineers, and follow through on work that spans teams.

What Will Set You Apart

• Experience with AWS, Pulumi or Terraform, and GitHub or Buildkite deployment workflows.

• Experience with Tailscale or WireGuard

• Security work involving robotics, aerospace, scientific computing, or remote field systems.

• Experience building self-service security tools or reusable controls that other engineering teams adopted.

What Success Looks Like In the First 90 Days

• You’ve mapped our critical systems and access paths and agreed on the highest-priority risks with the team. A secure configuration or access control is deployed on a critical system, with tests that catch unsafe changes. One recurring security workflow now runs automatically, with monitoring, a tested recovery path, and documentation so it can operate without your daily intervention. You’ve tested a detection and response path with the engineers who will use it and agreed on the next improvements.

Supporting the Rainmakers behind the mission

Making earth more habitable is ambitious work and we want the people doing it to feel supported:

• A stake in what we build: Meaningful stock options and the opportunity to help shape Rainmaker as an early member of the team.

• Support for your health: Comprehensive medical, dental, and vision insurance for you and your family.

• An investment in your future: A 401(k) with employer matching to help you build long‑term savings.

• Time to recharge: Unlimited PTO for rest, exploration, and the people and pursuits that matter to you plus a generous paid holiday schedule.

• Time for a growing family: Paid parental leave for both parents to welcome a child and spend time together.

• Lunch together: Daily lunch provided at our El Segundo headquarters, giving Rainmakers a chance to share a meal and connect with teammates.

• Help making the move: Relocation assistance for eligible roles to support your transition to Rainmaker.

Rainmaker Is An Equal Opportunity Employer

Employment decisions are made without regard to any characteristic protected by applicable federal, state or local law.

Rainmaker provides reasonable accommodations to qualified individuals with disabilities and for other protected reasons as required by law. If you need accommodation to participate in the application or interview process, contact [e-mail]. Requests for accommodation will be handled confidentially to the extent reasonably possible.

Data Privacy

California applicants can review our California Applicant Privacy Notice. The notice explains the personal information we collect, how we use it, how long we retain it, and the privacy rights that may be available.

E-Verify

Rainmaker participates in E-Verify for U.S. Employees. To learn more, including your rights and responsibilities, please visitE-verify.gov.