Senior Product Security Engineer

About Mach Industries

Founded in 2022, Mach Industries is a rapidly growing defense technology company focused on developing next-generation autonomous defense platforms. At the core of our mission is the commitment to delivering scalable, decentralized defense systems that enhance the strategic capabilities of the United States and its allies. With a workforce of approximately 220 employees, we operate with startup agility and ambition.

Our vision is to redefine the future of warfare through cutting-edge manufacturing, innovation at speed, and unwavering focus on national security. We are dedicated to solving the next generation of warfare with lethal systems that deter kinetic conflict and protect global security.

The Role

We’re seeking a Senior Product Security Engineer to lead a team of experts in creating advanced security tooling, uncovering critical vulnerabilities, and fortifying our suite of cutting-edge technologies – from AI-driven systems and command-and-control platforms to aerospace vehicles and long-range sensors.

The ideal candidate has a background in electrical or software engineering with deep expertise in platform security, or has transitioned into product or application security. They will perform in-depth security architecture assessments, identify and neutralize hardware and software exploits, and collaborate cross-functionally to embed resilience into our products. Additionally, they will spearhead team initiatives, delegate responsibilities effectively, and drive continuous security improvements.

Key Responsibilities

• Own the design, development, and evolution of security features across Mach’s product portfolio.

• Partner with software, hardware, and firmware teams to define and exceed industry-leading security benchmarks.

• Execute adversarial attacks against Mach’s products and integrated components to uncover and remediate vulnerabilities.

• Collaborate with engineering and manufacturing teams to establish and enforce secure handling and operational processes.

• Engage with teams to address weaknesses in designs, implementations, integrations, and processes.

Required Qualifications

• 3+ years of experience in a ProdSec, Security Engineering, or DevOps role

• Strong skills in one or more programming languages (e.g. C/C++, Rust, Python, Bash).

• Proficient in Python and Bash for automation of deployments, scans, and implementing security guardrails.

• Demonstrated ability to assess and harden security of firmware, applications, networks, IoT, and embedded systems.

• Proven track record building, testing, and delivering production-grade embedded and/or Linux-based systems.

• Experience with CI/CD pipelines using tools like GitHub Actions, GitLab CI, Jenkins, etc

• Familiarity with security-relevant features of at least one embedded ARM chip, NVIDIA Jetson

• Familiarity with compliance standards (e.g. DoD ATO, FedRAMP, NIST 800-171, or NIST 800-53)

• Familiarity with anti-tamper strategies and reverse-engineering tools.

• Comfortable owning large initiatives end-to-end with minimal oversight.

• Eligible to obtain and maintain an active U.S. Secret security clearance.

Preferred Qualifications

• Experience supporting production systems in a defense, robotics, or hardware-adjacent environment.

• Knowledge of security architectures for embedded, aerospace, and cyber-physical systems.

• Experience with programmable logic devices (FPGAs) and associated toolchains.

• Experience with building, testing, and delivering production-grade embedded or Linux systems.

• Experience in infrastructure-as-code (e.g. Terraform, CloudFormation).

• Proven track record of leading engineers through complex, hands-on work.

Disclosures

This position may require access to information protected under U.S. export control laws and regulations, including the Export Administration Regulations (EAR) and the International Traffic in Arms Regulations (ITAR).  Please note that any offer for employment may be conditioned on authorization to receive software or technology controlled under these U.S. export control laws and regulations without sponsorship for an export license.

Mach participates in E-Verify and will provide the federal government with your Form I-9 information to confirm that you are authorized to work in the U.S.

The salary range for this role is an estimate based on a wide range of compensation factors, inclusive of base salary only. Actual salary offers may vary based on (but not limited to) work experience, education and training, critical skills, and business considerations. Highly competitive equity grants are included in most offers and are considered part of Mach’s total compensation package. Mach offers benefits such as health insurance, retirement plans, and opportunities for professional development.

Mach is an equal opportunity employer committed to creating a diverse and inclusive workplace. All qualified applicants will be treated with respect and receive equal consideration for employment without regard to race, color, creed, religion, sex, gender identity, sexual orientation, national origin, disability, uniform service, Veteran status, age, or any other protected characteristic per federal, state, or local law, including those with a criminal history, in a manner consistent with the requirements of applicable state and local laws. If you’d like to defend the American way of life, please reach out!