Plan and run adversary emulation against spacecraft, flight software, ground systems, and development pipelines using SPARTA and MITRE ATT&CK.
Identify attack paths that cross system boundaries, including paths from ground-system compromise to spacecraft control.
Scope and lead third-party security assessments and integrate external findings with internal results.
Build fuzzing, automated testing, and agent-driven test-generation capabilities for continuous release testing.
Reverse engineer firmware and protocols, analyze embedded hardware interfaces, and review cryptography implementations.
Participate in design reviews to identify how proposed systems could be attacked before implementation.
Co-chair product security incident response, triage vulnerabilities, coordinate fixes, and help engineers address root causes.
Requirements
U.S. citizenship is required.
3–10 years of hands-on offensive security experience in penetration testing, red teaming, exploit development, or vulnerability research.
Demonstrated experience building custom tools, harnesses, or automation.
Experience combining multiple weaknesses into realistic attack paths.
Strong fundamentals in operating systems, networking, and applied cryptography, with the ability to read and debug unfamiliar code.
Ability to own technical projects from start to finish with little direction.
Clear communication skills for working with engineers and explaining risk to leadership.
Preferred qualifications include embedded or cyber-physical systems experience, fuzzing harness development, RTOS or embedded Linux experience, hardware-interface experience, AI-assisted security testing, satellite command-link or ground-station experience, third-party assessment leadership, public security research, or space security training.
Eligibility for a U.S. security clearance is preferred; an active clearance is not required.
Benefits
Equity and eligibility for long-term stock-option incentives.
Company-paid medical, dental, and vision coverage for employees and dependents, plus $100,000 of life insurance at no cost.
15 days of vacation initially, growing to 20 or more days annually, plus 10 paid holidays.
401(k) plan with matching contributions.
Eight weeks of paid parental leave and childcare reimbursement of up to $350 per day for work-related travel.
Daily catered lunch, unlimited snacks, office socials, recreational activities, and family gatherings.
Tools for a personalized desk setup.
In-person work at the Playa Vista office with flexibility to integrate work and life.