Senior Security Engineer

Beacon Venture Capital

. Design and implement secure architectures across applications, cloud infrastructure, backend services, and in-cockpit edge systems .

Posted 9/23/2026full-timeSan Carlos • California • United StatesSenior💰 $173,000 - $260,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing and implementing secure architectures across various environments, including cloud and edge systems, while ensuring compliance with FedRAMP and DoD standards. Proficient in integrating security into the software development lifecycle and leading incident response efforts.

Highest-signal resume keywords

Security EngineeringCloud Security (AWS/AWS GovCloud)Vulnerability AssessmentIncident ResponseFedRAMP Authorization

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Threat ModelingSecure Code ReviewEncryptionVulnerability ScanningSecurity MonitoringCI/CD Security ChecksAccess ManagementData Handling ControlsPenetration TestingZero Trust Architectures

Soft Skills

Analytical SkillsProblem-SolvingCollaborationPrioritizationRisk Management

Tools & Technologies

SIEMIDS/IPSCMMCNIST 800-53/800-171ISO 27001

Certifications & Qualifications

CISSPCISMCEH

Industry Keywords

AerospaceITARDoDCUI HandlingStateRAMP

Tech Stack

Tools & technologies

AWSCloudCyber SecurityiOSSDLC

About the role

Key responsibilities & impact

Design and implement secure architectures across applications, cloud infrastructure, backend services, and in-cockpit edge systems
Protect sensitive data through access management, encryption, and secure data-handling controls
Identify, assess, and mitigate security risks through vulnerability assessments, penetration testing, and security reviews
Lead incident response, including detection, containment, remediation, and follow-up analysis
Integrate security into the SDLC through threat modeling, secure code review, and automated security checks in CI/CD and infrastructure-as-code
Implement and operate security monitoring and logging for real-time threat detection and response
Support FedRAMP and DoD authorization and compliance efforts, including ATO packages, SSPs, and POA&Ms
Help maintain CMMC 2.0 readiness and DFARS cybersecurity alignment
Secure AI systems, including LLM and retrieval-based features, against prompt injection, data leakage, and model misuse
Partner closely with software teams to protect mission-critical flight safety technology

Requirements

What you’ll need

5+ years of hands-on experience in security engineering roles securing complex systems and data
Experience securing production cloud environments; AWS or AWS GovCloud strongly preferred
Strong knowledge of security principles, threat modeling, and defensive security practices
Experience with SIEM, IDS/IPS, vulnerability scanning, and encryption
Familiarity with NIST 800-53/800-171, ISO 27001, and CMMC
Direct experience with FedRAMP authorization processes and/or DoD Impact Level IL4/IL5 environments
Ability to set priorities, build security capabilities from scratch, and balance risk against a fast-moving product roadmap
Ability to collaborate with software engineers on secure system design
Strong analytical and problem-solving skills
Experience with aviation, aerospace, or DoD customers, particularly in ITAR-controlled environments is a bonus
Familiarity with zero trust architectures is a bonus
Experience with StateRAMP, IL5/IL6 systems, or classified/CUI handling is a bonus
Experience securing mobile iOS, embedded, or edge devices is a bonus
CISSP, CISM, or CEH certifications are a bonus
Must be a U.S. Person
Must be authorized to work in the United States
No visa sponsorship or visa transfers available
Must work in the United States

Benefits

Comp & perks

Offers equity
100% of employee medical premiums covered; 25% for dependents
3 weeks PTO
13+ paid company holidays
401(k) offered
Option to work remotely on remaining days after onsite work