Security Engineer

Revel, Los Angeles, San Francisco

The role

You'll be Revel's first security engineer. There's no existing program to inherit and no legacy decisions to work around. You'll set the foundation for how Revel protects its platform, its infrastructure, and its customers.

Revel's software runs test campaigns and controls hardware for teams building rockets, satellites, and energy systems. It deploys across cloud, on-prem, and air-gapped environments, often next to export-controlled programs and sensitive hardware. Our customers trust us with critical work, and you'll be the person who makes sure that trust is earned. This isn't a compliance-only role. You'll spend most of your time building, and you'll be as close to our product architecture as you are to our infrastructure.

What you will do

Build the program from zero. Define Revel's security strategy, architecture, and roadmap, then roll up your sleeves and build it. You'll decide what matters most now and what can wait.
Secure a platform that touches real hardware. Our software doesn't just move data. It commands physical systems. Threat-model the product end to end, from the control software and its interfaces to the hardware it runs against. Then turn that into concrete security requirements, design reviews, and testing that ship with every release.
Bring security into product design. Work with product and engineering leads early in the design process, so security is part of the architecture rather than bolted on before a customer review.
Own the stack end to end. From the Linux hosts and physical systems that sit alongside real hardware in labs and at customer sites, to cloud accounts, Kubernetes clusters, CI/CD pipelines, endpoints, and SaaS tools, you’ll harden all of it. Treat security configuration as code, and automate wherever you can.
Make secure delivery the default. Build scanning, secrets management, dependency controls, and signed, auditable releases into our pipelines, including how we deliver software into restricted and disconnected networks, without slowing engineering down.
Stand up detection and response. Build our logging, monitoring, and alerting from scratch, and lead incident response and vulnerability management when things go wrong.
Turn compliance into engineering. Lead Revel's approach to ITAR, NIST 800-171, CUI handling, and CMMC. Build compliance evidence and reporting into our systems instead of maintaining spreadsheets.
Be the security voice customers trust. Serve as Revel's primary security contact for defense and aerospace customers, from security questionnaires to architecture reviews.
Make everyone better at security. Partner with software and embedded engineers on threat modeling and secure design, and help every Revel employee understand their part.
Grow the function. As the company scales, help define when and who we hire next in security, and shape what the team becomes.

Security Engineer

The role

Security Engineer

The role

What you will do

What you need

Nice to have

About Revel

Similar jobs at other companies