Product Security Lead (Aerospace)

Location: Torrance, California, United States. U.S. citizenship or lawful permanent resident status is required for ITAR compliance, and the ability to obtain and maintain a Top Secret or TS/SCI security clearance is required.

Salary: $120,000–$222,000 per year, plus equity.

Company

hirify.global develops space infrastructure and a global network of phased-array ground stations for reliable, real-time satellite communications supporting national security, connectivity, and disaster response.

What you will do

• Own application and product security across the software development lifecycle, from design and architecture review through production release.
• Lead threat modeling, secure coding standards, developer security training, and security review gates.
• Deploy and improve SAST, DAST, container scanning, dependency analysis, and software composition analysis pipelines.
• Own vulnerability management and coordinate penetration testing, remediation tracking, and validation across product and infrastructure systems.
• Secure CI/CD, GitOps, infrastructure-as-code, artifact signing, supply chain integrity, and secrets management using platforms such as HashiCorp Vault.
• Design cryptographic controls and secure communications for satellite systems while leading product security engineers and collaborating with engineering, network operations, mission management, and compliance teams.

Requirements

• 5+ years of experience in product security, application security, or related security engineering, including technical leadership.
• Deep expertise in SAST, DAST, vulnerability management, penetration testing, applied cryptography, PKI, key management, and secure protocol design.
• Experience securing CI/CD pipelines, GitOps workflows, infrastructure-as-code, secrets management, and automated security gates.
• Proficiency in Python, Go, Rust, or an equivalent general-purpose programming language.
• Knowledge of NIST 800-171, CMMC, and FedRAMP requirements.
• Must be able to obtain and maintain a Top Secret security clearance and meet U.S. ITAR eligibility requirements.

Nice to have

• Production experience with HashiCorp Vault, Terraform, and ArgoCD.
• Experience with container security, admission controllers, microservices security, SLSA, Sigstore, and SBOM generation.
• Experience in aerospace, defense, critical infrastructure, or other regulated industries.
• Knowledge of DFARS, ITAR, government contracting security requirements, and eMASS.
• CISSP, CSSLP, OSCP, or an equivalent certification.

Culture & Benefits

• Equity through company stock options and discretionary performance bonuses.
• Medical, vision, and dental coverage with flexible spending accounts.
• Flexible time off and 10 or more paid holidays per year.
• Retirement savings plans and professional development opportunities.
• Work focused on deploying systems with real-world impact in space communications and national security.