Senior Security Engineer - Enterprise & Product
Northwood Space
Location
Torrance, CA
Employment Type
Full time
Department
Software
Compensation
- Estimated Base Salary $160K – $220K
Compensation at Northwood Space is based on role, level, location, and alignment with market data. Individual base pay is determined on a case-by-case basis and may vary depending on job-related skills, education, experience, and technical expertise. In addition to base salary, Northwood Space offers long-term incentives such as company stock options and discretionary performance bonuses. Benefits include equity, comprehensive health care, flexible vacation, retirement savings plans, and opportunities for professional development.
About Northwood:
Northwood is a modern space infrastructure company focused on connecting space and Earth. The world runs on space. Space will run on Northwood. Our global ground network ensures that missions ranging from national security, to global connectivity, to disaster response can unlock their full potential and operate every day without fail.
Role:
We're building the internet for space. Help us architect the security.
Northwood is deploying a global network of phased array ground stations for mission-critical government and commercial space communications. We need a Senior Security Engineer to design and build the technical security foundation that protects our distributed ground station network while enabling rapid scaling.
Responsibilities:
Design security architectures for space infrastructure - Build security controls for phased array ground stations that track hundreds of satellites simultaneously. Design secure communication protocols for satellite telemetry and real-time space communications.
Integrate security into GitOps workflows - Embed security controls into Terraform modules, ArgoCD ApplicationSets, and Vault configurations. Review infrastructure as code and implement automated security validation in CI/CD pipelines.
Build custom security tooling - Develop security automation and tools that integrate with our infrastructure. You're not just configuring tools; you're building custom security solutions.
Secure distributed ground station networks - Implement network security for globally distributed infrastructure including FortiGate firewalls, AWS Transit Gateway, and Cloudflare Zero Trust. Design secure remote access and inter-site communication.
Engineer enterprise and product security - Deploy and manage enterprise security solutions including Okta/Auth0 identity management, DLP systems, insider threat detection, and endpoint security across ground station systems and cloud workloads. Build security into products from design through deployment.
Deploy and configure SIEM platforms - Build enterprise SIEM solutions that handle terabytes of satellite communications data. Design log ingestion pipelines, correlation rules, and automated workflows for continuous monitoring across distributed ground stations.
Basic Qualifications
5+ years of production experience with infrastructure as code (Terraform, AWS CDK) - You automate everything and treat security configurations like the critical code they are
Experience conducting security architecture reviews in regulated environments with strict compliance requirements
Experience with application security reviews for vendor applications and developer code
Network security expertise with firewalls, VPNs, zero-trust architectures, and distributed systems
Experience with government cloud environments (AWS GovCloud, Azure Government) and CI/CD pipelines
Proficiency in one or more general-purpose languages (Python, Go, Rust, etc.)
Hands-on experience with SIEM platforms and security tooling deployment
Ability to obtain and maintain TS/SCI clearance
Preferred Qualifications
Experience with HashiCorp Vault, Terraform automation, and ArgoCD GitOps workflows
Container security scanning, admission controllers, and microservices security
Experience building large-scale log ingestion and security data pipelines
Hands-on experience with SIEM platforms (Splunk, Sentinel, Panther) and endpoint security solutions (CrowdStrike, SentinelOne)
Strong Linux experience in production environments with custom distributions
Government/defense industry background with DFARS compliance knowledge
RF and satellite communications security knowledge
Additional Information:
To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR) you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State.
Northwood is an Equal Opportunity Employer; employment with Northwood is governed on the basis of merit, competence and qualifications and will not be influenced in any manner by race, color, religion, gender, national origin/ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability or any other legally protected status.
Compensation Range: $160K - $220K