NorthwoodSpace

Product Security Manager

Torrance, CA

No sponsorship$171k-$800kDetected 12 days ago

TypeScriptPythonGoRustTerraformCI/CDRESTCybersecurityPenetration TestingSupply ChainLeadershipCommunicationCollaborationArgo CDCISSP

About the role

If you like solving complex challenges and seeing your work deployed around the world with real impact, Northwood is the place to do it.
Your ability to secure the necessary clearance is essential for fulfilling key responsibilities of the role.
Should you be unable to obtain it, Northwood Space reserves the right to modify or terminate your employment to align with optional needs.

Own application security across the full software development lifecycle, ensuring security requirements are defined, validated, and enforced from design through production release.
Establish and maintain secure coding standards, security review gates, and developer security training programs.
Deploy, manage, and continuously improve static application security testing (SAST) and dynamic application security testing (DAST) tooling integrated into development workflows.
Own the vulnerability management program end-to-end: discovery, triage, prioritization, remediation tracking, and reporting across product and infrastructure systems.
Build and maintain container security scanning, dependency analysis, and software composition analysis (SCA) pipelines.
Own secrets management infrastructure, including deployment, policy configuration, access controls, and audit logging for platforms such as HashiCorp Vault.
Implement and enforce controls for secure artifact management, signing, and supply chain integrity across build and deployment pipelines.
Design and implement cryptographic controls for data at rest, data in transit, and satellite communication protocols, ensuring alignment with NIST standards and government customer requirements.
Hire and develop product security engineers as the team scales.
Collaborate with network operations, mission management, and compliance teams to maintain a security posture that enables mission success without breaking deployment cycles.

5+ years in product security, application security, or a closely related security engineering discipline, with demonstrated technical leadership experience.
Deep expertise in SAST and DAST tooling, including tool selection, integration into CI/CD pipelines, and results-driven vulnerability remediation programs.
Experience owning vulnerability management programs, including prioritization frameworks, SLA enforcement, and executive reporting.
Proficiency with secrets management platforms such as HashiCorp Vault, including policy design and access control architecture.
Experience securing CI/CD pipelines and GitOps workflows, including IaC security review and automated security gate implementation.
Proficiency in one or more general-purpose programming languages (Python, Go, Rust, or equivalent).
Familiarity with government compliance frameworks including NIST 800-171, CMMC, and FedRAMP.
U.S. citizenship or status as a lawful permanent resident required to conform with ITAR export regulations.

Active TS clearance or higher.
Experience with HashiCorp Vault, Terraform, and ArgoCD in production environments.
Hands-on experience with container security scanning, admission controllers, and microservices security patterns.
Familiarity with software supply chain security frameworks and tooling (SLSA, Sigstore, SBOM generation).
Background in aerospace, defense, critical infrastructure, or other regulated industries.
Experience with DFARS compliance, ITAR, and government contracting security requirements.
Familiarity with eMASS or similar government assessment and authorization tools.
CISSP, CSSLP, OSCP, or equivalent professional certification.

Northwood is a modern space infrastructure company bringing the benefits of space to the masses through advanced communications technology.

We are building a global network of phased array ground stations that enable real-time, reliable communication for satellite missions such as national security, global connectivity, and disaster response.
This is a senior technical leadership role for an engineer with deep expertise across the full product security lifecycle - from threat modeling and secure architecture review to penetration testing, vulnerability management, and the cryptographic foundations that protect mission-critical space communications.
You will embed security into every stage of our software development lifecycle, build and mature our application security program, and ensure that the products Northwood delivers to government and commercial customers meet the most demanding security requirements in the industry.
If you need a reasonable accommodation as part of your application for employment or interviews with us, please let us know.

citizenship or status as a lawful permanent resident required to conform with ITAR export regulations

This listing is sourced directly from NorthwoodSpace's careers page and normalized into a canonical job model.