Job description

Astranis builds advanced satellites for high orbits, expanding humanity’s reach into the solar system. Today Astranis satellites provide dedicated, secure networks to highly-sophisticated customers across the globe – large enterprises, sovereign governments, and the US military. With five satellites on orbit and many more set to launch soon, the company is servicing a backlog of more than $1 billion of commercial contracts. Astranis is the preferred satellite communications partner for buyers with stringent requirements for uptime, data security, network visibility, and customization. Astranis has raised over $1.2 billion from some of the world’s best investors, including Andreessen Horowitz, Baillie Gifford, Blackrock, Fidelity, Franklin Templeton, and Snowpoint, and employs a team of 500 engineers and entrepreneurs. Astranis designs, builds, and operates its satellites out of its 153,000 sq. ft. headquarters in Northern California, USA. Senior Product Security Engineer As a Senior Product Security Engineer, you will help secure both the software and embedded components that power our systems. This hybrid role focuses primarily on product/application security while contributing to embedded security reviews where software and hardware intersect. You will guide secure design, evaluate critical components, and partner closely with engineering teams across the stack to ensure our products are secure by default. This role does not expect deep hardware hacking but requires a broad security mindset to provide expertise where embedded systems and software meet. Role Lead threat modeling, architecture reviews, and design-level risk assessments for both application and embedded system components. Conduct secure code reviews for critical modules in Python and C/C++, supporting secure coding practices across all engineering teams. Evaluate cryptographic usage, authentication/authorization flows, and protocol security across the stack. Identify and prioritize vulnerabilities in software and firmware; partner with developers on remediation and mitigation strategies. Participate in security assessments of embedded devices, especially where software interfaces with hardware. Provide security input on high-level aspects of secure boot, firmware update integrity, and device identity mechanisms. Partner with software, firmware, hardware, and systems teams to implement consistent, secure solutions. Requirements 5+ years of experience in software engineering with a focus on security. Strong investigative, analytical problem-solving skills and attention to detail. Experience with secure architecture design and threat modeling for complex systems (including both web services and IoT/embedded devices). Software development and security expertise in both high-level languages (e.g., Python) and low-level languages (e.g., C, C++). Experience with security best practices for web applications (OWASP Top 10) and familiarity with embedded security concepts (e.g., secure boot, JTAG, UART). Proven ability in auditing code for security flaws across different technology stacks. Strong knowledge of security best practices, applied cryptography, and security frameworks. Strong communication skills, with the ability to discuss security with both software and hardware engineers. Ability to work collaboratively within a multi-disciplinary team environment. What we offer: All our positions offer a compensation package that includes equity and robust benefits. Base pay is just one component of Astranis’s total rewards package. Your compensation also includes a significant equity package via incentive stock options, high-quality company-subsidized healthcare, disability and life insurance, 401(k) retirement planning, flexible PTO, and free on-site catered meals. Astranis pay ranges are informed and defined through professional-grade salary surveys and compensation data sources. The actual base salary offered to a successful candidate will additionally be influenced by a variety of factors including experience, credentials & certifications, educational attainment, skill level requirements, and the level and scope of the position. Base Salary $180,000 — $285,000 USD U.S. Citizenship, Lawful Permanent Residency, or Refugee/Asylee Status Required (To comply with U.S. Government space technology export regulations, applicant must be a U.S. citizen, lawful permanent resident of the United States, or other protected individual as defined by 8 U.S.C. 1324b(a)(3)) Our mission and products are built for everyone, regardless of gender, race, creed, or background. We believe in a diverse and inclusive workplace, and we invite all people to join our team and bring their unique perspectives to make us stronger. Astranis SMS Terms of Service Recruiting Updates: By opting in, you agree to receive SMS updates, interview coordination, and recruiting communications from Astranis Space Technologies Corp. Opt-Out: You can cancel this service at any time by replying STOP . We will send one final text confirming your unsubscription. Opt-In Again: To resume receiving messages, reply START or YES . Support & Rates: For assistance, reply HELP or contact us at +16504498097. Message and data rates may apply. Message frequency varies; carriers are not liable for delayed or undelivered messages. Privacy: For details on how we protect your data, view our Privacy Policy .

Requirements

Must-haves

Lead threat modeling, architecture reviews, and design-level risk assessments for both application and embedded system components.
Conduct secure code reviews for critical modules in Python and C/C++, supporting secure coding practices across all engineering teams.
Evaluate cryptographic usage, authentication/authorization flows, and protocol security across the stack.
Identify and prioritize vulnerabilities in software and firmware; partner with developers on remediation and mitigation strategies.
Participate in security assessments of embedded devices, especially where software interfaces with hardware.
Provide security input on high-level aspects of secure boot, firmware update integrity, and device identity mechanisms.
Partner with software, firmware, hardware, and systems teams to implement consistent, secure solutions.
5+ years of experience in software engineering with a focus on security.
Strong investigative, analytical problem-solving skills and attention to detail.
Experience with secure architecture design and threat modeling for complex systems (including both web services and IoT/embedded devices).
Software development and security expertise in both high-level languages (e.g., Python) and low-level languages (e.g., C, C++).
Experience with security best practices for web applications (OWASP Top 10) and familiarity with embedded security concepts (e.g., secure boot, JTAG, UART).
Proven ability in auditing code for security flaws across different technology stacks.
Strong knowledge of security best practices, applied cryptography, and security frameworks.
Strong communication skills, with the ability to discuss security with both software and hardware engineers.
Ability to work collaboratively within a multi-disciplinary team environment.

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

python

Platform: greenhouse
Effort: quick

Benefits

Benefits detected in the listing.

401(K)

Pto