Senior Security Engineer
Loft Orbital
Job Summary
Loft Orbital is seeking a Senior Security Engineer to join their Security and Compliance Team. The role involves ensuring the security of highly automated, containerized, and globally distributed infrastructure throughout its lifecycle, from architecture to incident response. The Senior Security Engineer will be integral to DevSecOps efforts, collaborating with various teams to scale security maturity. Responsibilities include championing DevSecOps best practices, automating security assessments, identifying and remediating vulnerabilities, designing secure architecture patterns for cloud-native workloads, developing automated security tooling, and supporting incident response. The position also involves providing technical mentorship and contributing to internal security tools. This is a hands-on, collaborative role with opportunities for growth and contribution to space missions.
Must Have
- Cloud security in AWS, Azure, or GCP
- Container and Kubernetes security
- Proficiency in Python, Go, or C++
- Zero-trust architecture, service mesh, SDN
- DevSecOps pipelines, IaC, secure build processes
- Vulnerability scanning, SAST/DAST, automated security testing
- Experience in fast-paced, collaborative environments
- Comfort working with developers and SREs
- Clear communication and documentation skills
- Ability to thrive in a global team
Good to Have
- Policy-as-code (OPA, Sentinel)
- Software-defined networking security
- SRE practices, observability, resilience engineering
- Contributions to open-source security tools
- Interest/experience in space operations
Perks & Benefits
- 100% company-paid medical, dental, vision
- FSA and HSA accounts with employer contribution
- 100% employer paid life, AD&D, STD, LTD insurance
- Flexible Time Off
- 401(k) plan and equity options
- Daily catered lunches and snacks
- International exposure
- Fully paid parental leave
- Carrot Fertility benefits
- Off-sites and social events
- Relocation assistance
Job Description
About the Role:
- Champion DevSecOps best practices by designing and implementing security controls directly into our CI/CD pipelines (e.g., GitLab CI).
- Lead and automate application and infrastructure security assessments, including threat modeling and code review.
- Partner with developers and SREs to identify, remediate, and prevent vulnerabilities through secure design and practical guidance.
- Design, build, and maintain secure architecture patterns for containerized, cloud-native, and distributed workloads.
- Develop and maintain automated security tooling, such as container image scanning, IaC validation, and policy-as-code.
- Collaborate on automated security tooling for container image scanning, IaC validation, and RBAC compliance.
- Support incident response workflows, including detection, forensics, root cause analysis, and post-mortems.
- Provide technical mentorship and real-time enablement to help teams adopt a “secure-by-default” mindset.
- Contribute to internal security tools and automation using Python, Go, or other modern languages.
- Continuously improve how we measure and scale security across our SRE and infrastructure platforms.
Must Haves:
- Deep experience with cloud security in AWS, Azure, or GCP environments.
- Strong knowledge of container and Kubernetes security in production environments.
- Proficiency in at least one modern programming language (e.g., Python, Go, C++).
- Hands-on experience with zero-trust architecture, service mesh, and software-defined networking.
- Solid understanding of DevSecOps pipelines, IaC tools, and secure build processes.
- Hands-on experience with vulnerability scanning, SAST/DAST tools, and automated security testing.
- Proven success in fast-paced, highly collaborative environments, ideally at a startup or scale-up.
- Comfortable working closely with developers and SREs in an enablement-first security culture.
- Clear, concise communication and documentation skills.
- Ability to thrive in a multicultural, globally distributed engineering team.
Nice to Haves:
- Practical experience with policy-as-code (OPA, Sentinel, etc.).
- Understanding of software-defined networking and security policy enforcement in mesh environments.
- Familiarity with modern SRE practices, observability, and resilience engineering.
- Contributions to open-source security tools or frameworks.
- Interest or experience in space operations or aerospace systems.
Some of Our Awesome Benefits:
- 100% company-paid medical, dental, and vision insurance option for employees and dependents
- Flexible Spending (FSA) and Health Savings (HSA) Accounts offered with an employer contribution to the HSA
- 100% employer paid Life, AD&D, Short-Term, and Long-Term Disability insurance
- Flexible Time Off policy for vacation and sick leave, and 12 paid holidays
- 401(k) plan and equity options
- Daily catered lunches and snacks in office
- International exposure to our team in France
- Fully paid parental leave; 14 weeks for birthing parent and 10 weeks for non-birthing parent
- Carrot Fertility provides comprehensive, inclusive fertility healthcare and family-forming benefits with financial support
- Off-sites and many social events and celebrations
- Relocation assistance when applicable