Senior Embedded Software Engineer - Cybersecurity

Please Note: To conform with the United States Government Space Technology Export Regulations, the applicant must be a U.S. citizen, lawful permanent resident of the U.S., conditional resident, asylee or refugee (protected individuals as defined by 8 U.S.C. 1324b(a)(3)), or eligible to obtain the required authorizations from the U.S. Department of State.

At CesiumAstro, we are developers and pioneers of out-of-the-box communication systems for satellites, UAVs, launch vehicles, and other space and airborne platforms. We take pride in our dynamic and cross-functional work environment, which allows us to learn, develop, and engage across our organization. If you are looking for hands-on, interactive, and autonomous work, CesiumAstro is the place for you. We are actively seeking passionate, collaborative, energetic, and forward-thinking individuals to join our team.

CesiumAstro is seeking a highly skilled Senior Embedded Software Engineer - Cybersecurity to lead the design, architecture, and deployment of cyber-secure embedded flight software for space and defense applications. This role sits within our Space Software organization and supports Department of Defense (DoD) and SDA initiatives across multiple product lines, including space payloads, phased-array systems, and RF communications platforms.

This position blends deep embedded software expertise with advanced cybersecurity engineering, including anti-tamper frameworks, secure boot, encryption, integrity monitoring, and full lifecycle secure software development. The ideal candidate will serve as a technical leader, driving architecture decisions, risk management, milestone execution, and mentoring engineers in a collaborative Agile environment.

JOB DUTIES AND RESPONSIBILITIES:
• Architect and deliver cyber-hardened embedded products for space and missile defense systems.

• Define reusable secure software frameworks for multi-program deployment.

• Own technical roadmaps, risk management strategies, and milestone delivery for defense programs.

• Provide mentorship and technical leadership to software and quality engineering teams.

• Design and deploy anti-tamper and embedded cybersecurity frameworks for DoD-focused product lines.

• Implement cyber control measures including secure boot, encryption, integrity monitoring, and Zero Trust principles.

• Apply NIST System Security Engineering (SSE) principles throughout the software lifecycle.

• Integrate static analysis tools, evaluate CWE findings, and conduct vulnerability assessments based on mission risk.

• Implement and validate DISA STIG compliance and Risk Management Framework (RMF) security controls.

• Support DoDI 8510.01 and related cybersecurity accreditation processes.

• Design, code, analyze, and debug applications in C, C++, Python, Shell scripting, and memory-safe languages such as Rust.

• Develop real-time embedded software in RTOS environments (e.g., VxWorks, Linux, UNIX).

• Manage embedded Linux distributions using Yocto Project.

• Support hardware/software co-design and deployment into hardware test and integration environments.

• Lead code reviews, interface design, requirements analysis, and secure coding implementation.

• Utilize CI/CD pipelines and DevSecOps practices using Git, GitLab, Docker, and related tooling.

JOB REQUIREMENTS AND MINIMUM QUALIFICATIONS:
• Bachelor’s degree in Computer Science, Computer Engineering, Electrical Engineering, or related field.

• 5+ years of experience in application security, system hardening, or embedded cybersecurity in a senior role, inclusive of 3+ years of experience developing real-time embedded software.

• Demonstrated technical leadership or product ownership for complex software programs.

• Strong proficiency in C/C++, Python, and secure embedded development practices.

• Experience with RTOS environments and embedded Linux systems.

• Deep understanding of:

• NIST SP 800-160 (System Security Engineering)

• NIST SP 800-37 (Risk Management Framework)

• NIST SP 800-53 (Security Controls)

• DISA STIGs and RMF Cyber Controls

• Experience with secure coding standards, software fuzzing, and vulnerability management.

• Familiarity with Agile methodologies and DevOps/DevSecOps toolchains.

• Ability to obtain and maintain a U.S. DoD Secret Security Clearance (TS/SCI preferred).

• Must obtain (within six months of hire, if not already held) a DoD 8570.01-M certification (e.g., Security+, CISSP).

PREFERRED EXPERIENCE:
• Experience deploying cyber-secure embedded flight software to hardware integration and test environments.

• Experience with Secure Boot, Zero Trust Architecture, GOCO environments.

• Familiarity with CSNA 2.0, CNSSI 1200, CNSSP 12/15/1253/1254.

• Strong technical documentation and reporting skills.

• Experience supporting Space Development Agency (SDA) or similar defense initiatives.

CesiumAstro considers several factors when extending an offer, including but not limited to, the role and associated responsibilities, a candidate’s work experience, education/training, and key skills. Full-time employment offers include company stock options and a generous benefits package including health, dental, vision, HSA, FSA, life, disability and retirement plans.

CesiumAstro is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, protected Veteran Status, or any other characteristic protected by applicable federal, state, or local law.

Please note: CesiumAstro does not accept unsolicited resumes from contract agencies or search firms. Any unsolicited resumes submitted to our website or to CesiumAstro team members will be considered property of CesiumAstro, and we will not be obligated to pay any referral fees.