Senior Security Engineer

The role

This person will design and operate secure architectures across applications, cloud infrastructure, backend services, and in-cockpit edge systems. They will protect sensitive data and ensure compliance with FedRAMP and DoD requirements.

What you will do

• Design and implement secure architectures across applications, cloud infrastructure, backend services, and in-cockpit edge systems.
• Protect sensitive data through access management, encryption, and secure data handling.
• Identify, assess, and mitigate security risks through vulnerability assessments, penetration testing, and security reviews.
• Lead incident response efforts including detection, containment, remediation, and follow-up analysis.
• Integrate security into the SDLC through threat modeling, secure code review, and automated security checks.
• Implement and operate security monitoring and logging.
• Support authorization and compliance efforts for FedRAMP and DoD accreditation processes.
• Help maintain CMMC 2.0 readiness and alignment with DFARS cybersecurity clauses.
• Secure AI systems against risks like prompt injection, data leakage, and model misuse.

Required qualifications

• 5+ years of hands-on experience in security engineering roles securing complex systems and data, including production cloud environments.
• Strong knowledge of security principles, threat modeling, and defensive security practices.
• Experience with common security tools and technologies (e.g., SIEM, IDS/IPS, vulnerability scanning, encryption).
• Familiarity with security and compliance frameworks such as NIST 800-53/800-171, ISO 27001, and CMMC.
• Direct experience with FedRAMP authorization processes (ATO, SSP, POA&M) and/or DoD Impact Level (IL4/IL5) environments.
• Comfort being an early security owner.
• Proven ability to collaborate effectively with software engineers on secure system design.
• Hands-on mindset with strong analytical and problem-solving skills.

Nice to have

• AWS or AWS GovCloud
• Passion for aviation and a desire to improve air travel efficiency and safety.
• Experience working with aviation, aerospace, or DoD customers, particularly in ITAR-controlled environments.
• Familiarity with zero trust architectures or advanced security approaches.
• Experience with StateRAMP, IL5/IL6 systems, or classified/controlled unclassified information (CUI) handling.
• Experience securing mobile (iOS), embedded, or edge devices operating in disconnected or constrained environments.
• Relevant security certifications such as CISSP, CISM, or CEH.

Benefits

• 100% of employee medical premiums covered
• 25% for dependents medical premiums
• 3 weeks PTO
• 13+ paid company holidays
• 401(k) offered

Before you apply

• Can only hire U.S. Persons (U.S. citizens, Green Card holders, lawful permanent residents, or individuals granted asylum or refugee status).
• Unable to provide visa sponsorship or support visa transfers.
• All work must be performed in the United States.

About the company

Beacon AI is a team of aviators, engineers, and operators building an AI platform to make flying safer, more efficient, and more capable. They have secured a dozen Department of Defense contracts and partnered with major airlines.