Senior Security Engineer

<p>Loft Orbital is revolutionizing access to space by building reliable, shareable satellites that drastically reduce the time and complexity traditionally required to get to orbit. We operate satellites, fly customer payloads, and handle entire missions from end-to-end. We’re a close-knit team of space enthusiasts, software experts, and cutting-edge technologists, all working together to make space simple for our customers.</p><p><br></p><p>As a<b> Senior Security Engineer</b> on our Security and Compliance Team, your mission will be to ensure that our highly automated, containerized, and globally distributed infrastructure remains secure throughout its lifecycle, from architecture to incident response. You’ll be at the heart of our DevSecOps efforts, collaborating directly with infrastructure, software, product, and solution teams to scale Loft’s security maturity while embracing our startup agility and culture.</p><p><br></p><p>This is a hands-on, deeply collaborative role, offering broad scope, rapid growth opportunities, and yes, a chance to contribute to space missions</p>\n<p></p><p><br></p><b>About the Role:</b><ul><li>Champion <b>DevSecOps best practices</b> by designing and implementing security controls directly into our <b>CI/CD pipelines</b> (e.g., GitLab CI).</li><li>Lead and automate <b>application and infrastructure security assessments</b>, including threat modeling and code review.</li><li>Partner with developers and SREs to <b>identify, remediate, and prevent vulnerabilities</b> through secure design and practical guidance.</li><li>Design, build, and maintain <b>secure architecture patterns</b> for containerized, cloud-native, and distributed workloads.</li><li>Develop and maintain <b>automated security tooling</b>, such as container image scanning, IaC validation, and policy-as-code.</li><li>Collaborate on <b>automated security tooling</b> for container image scanning, IaC validation, and RBAC compliance.</li><li>Support incident response workflows, including detection, forensics, root cause analysis, and post-mortems.</li><li>Provide <b>technical mentorship and real-time enablement</b> to help teams adopt a “secure-by-default” mindset.</li><li>Contribute to <b>internal security tools and automation</b> using Python, Go, or other modern languages.</li><li>Continuously improve how we measure and scale security across our <b>SRE and infrastructure platforms</b>.</li></ul><p><br></p><b>Must Haves:</b><ul><li>Deep experience with <b>cloud security</b> in AWS, Azure, or GCP environments.</li><li>Strong knowledge of <b>container and Kubernetes security</b> in production environments.</li><li>Proficiency in <b>at least one modern programming language</b> (e.g., Python, Go, C++).</li><li>Hands-on experience with <b>zero-trust architecture</b>, service mesh, and software-defined networking.</li><li>Solid understanding of <b>DevSecOps pipelines</b>, IaC tools, and secure build processes.</li><li>Hands-on experience with <b>vul