Red Team Engineer, Product Security

The role

You will attack spacecraft, ground stations, cloud command-and-control software, and production pipelines. You will run internal assessments, lead outside firms, and build testing tools. This is a hands-on engineering role.

What you will do

• Plan and run adversary emulation against spacecraft, flight software, ground systems, and development pipeline.
• Look for attack paths that cross system boundaries.
• Lead third-party security assessments.
• Design and build fuzzing and automated testing capability.
• Reverse engineer firmware and protocols.
• Analyze embedded hardware interfaces.
• Review how cryptography is implemented.
• Join design reviews to show how proposed designs could be attacked.
• Co-chair product security incident response process.
• Work with engineering teams to fix root causes.

Required qualifications

• US Citizenship
• 3-10 years of hands-on offensive security experience in penetration testing, red teaming, exploit development, or vulnerability research.
• Track record of building your own tools, harnesses, or automation.
• Experience combining several smaller weaknesses into a realistic attack path.
• Solid fundamentals in operating systems, networking, and applied cryptography.
• Comfort reading and debugging code you have not seen before.
• Ability to own a technical project from start to finish with little direction.
• Clear communication.

Nice to have

• Experience with embedded or cyber-physical systems in space, aerospace, automotive, robotics, industrial/OT, medical devices, or autonomous vehicles.
• Experience building fuzzing harnesses for embedded or protocol targets, and working with RTOS, embedded Linux, or hardware interfaces such as JTAG, SWD, SPI, I2C, or CAN.
• Experience with AI-assisted security testing.
• Familiarity with RF and satellite command links, GNSS spoofing and jamming, or ground station architecture.
• Experience scoping or directing the work of outside assessment firms.
• Public work such as CVEs, published research, conference talks, or CTF results, or space security training such as the Hack The Box Satellite Exploitation track.
• Eligibility for a U.S. security clearance.

Benefits

• Equity in Apex
• 100% company-paid medical, dental, and vision for you and your dependents
• $100k life insurance at no cost
• Starting at 15 days vacation, growing to 20+ days annually
• 10 paid holidays
• 100% match on first 3% and 50% on next 2% 401(k) matching
• 8 weeks paid parental leave
• Childcare reimbursement up to $350/day for work-related travel
• Daily catered lunch and unlimited snacks
• Monthly office socials, pickleball tournaments, run club, and gatherings
• Dream desk setup

Before you apply

• Must qualify as a U.S. Person (U.S. citizen or national, lawful permanent resident, refugee, or individual granted asylum) or be able to obtain required export authorizations.

About the company

Apex manufactures satellite buses at scale using software, vertical integration, and hardware. They aim to provide humankind access to the galaxy beyond our planet.