Lead Product Security Engineer

Aalyria
United States
Workplace: RemoteFull timeFunction: CybersecuritySkills: ["Leadership","Threat modeling","Vulnerability triage","Written communication","Mentoring"]

Own product security across Aalyria, serving as the technical voice for app security, CI/CD and supply-chain security, and Kubernetes-based infrastructure protection. Lead PKI/mTLS architecture, vulnerability triage and incident response for product-side issues, and drive secure hardening and compensating controls across environments. Partner with hardware engineering on Tightbeam security and work closely with engineering teams to translate security and compliance requirements into engineering execution.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Aalyria
Aalyria
1 month ago

Lead Product Security Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 8 hours agoStatus: Live

Job Summary

Own product security across Aalyria, serving as the technical voice for app security, CI/CD and supply-chain security, and Kubernetes-based infrastructure protection. Lead PKI/mTLS architecture, vulnerability triage and incident response for product-side issues, and drive secure hardening and compensating controls across environments. Partner with hardware engineering on Tightbeam security and work closely with engineering teams to translate security and compliance requirements into engineering execution.
Location: United States
Workplace: Remote
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Mid level

Key Responsibilities

  • •Own application & software security across the codebase, including SAST/DAST/SCA, secure SDLC, threat modeling, and vulnerability management.
  • •Harden CI/CD and supply-chain security by securing GitLab pipelines with build provenance, dependency integrity, signing, and SLSA-aligned controls.
  • •Secure product infrastructure by hardening GKE/Kubernetes, container security, workload identity, network policy, and runtime protection.
  • •Design and manage product PKI and mTLS architecture, including certificate issuance, rotation, and lifecycle management.
  • •Lead product incident response and security incident post-mortems, coordinating with corporate IR and driving action items.

Pay and Benefits

Perks:401kDentalVisionHealth InsuranceLife InsurancePaid LeaveEquity

Key Requirements

  • •Senior- or staff-level hands-on experience in product security or security engineering with deep software/app security expertise.
  • •Production experience securing cloud environments (e.g., IAM, org policy, VPC Service Controls, KMS) and Kubernetes to a deep level.
  • •Strong cryptography and PKI fundamentals, including key management, signing, mTLS, and large-scale secrets handling.
  • •Hands-on coding ability in Python, Bash, and Go to build tooling and automate security controls (including Terraform/scripts when needed).
  • •Experience leading product incident response, triage, coordination with engineering, and post-mortem ownership.
Experience:AerospaceSecurity engineeringProduct securityCloud environmentsKubernetes
Skills:LeadershipThreat modelingVulnerability triageWritten communicationMentoring
Tech Stack:SASTDASTSCASecure SDLCThreat modelingSoftware vulnerability managementGitLabCI/CDBuild provenanceDependency integritySigningSLSAGitLab pipelinesKubernetesGKEContainer securityWorkload identityNetwork policyRuntime protectionPKI

Company Brief

Aalyria
Develops advanced network orchestration and laser communications technology to connect space, airborne, and terrestrial systems. The company emerged from Alphabet's Loon assets and focuses on resilient, long-range connectivity infrastructure.
Industry: Space Technology
Company Size: Medium (51 to 250 employees)
Growth: Growth Stage Startup
Headquarters: Mountain View, United States
Founded: 2022
WebsiteLinkedIn