Apex Space
Red Team Engineer, Product Security
$160K–$200K
Los Angeles · Full-time · Posted Oct 27, 2026
- Experience
- 3–10 years; the posting also says strong mid-level candidates with deep hands-on experience will be considered.
- Visa sponsorship
- Applicants must qualify as a U.S. Person under the stated ITAR definition or be able to obtain required U.S. government export authorizations. U.S. citizenship is also listed as a requirement.
About the job
Conduct hands-on red-team assessments of Apex’s spacecraft, ground systems, cloud software, and development and manufacturing processes, then help engineering teams fix weaknesses.
What you'll do
- Plan and execute adversary emulation across products and development pipelines, including cross-system attack paths.
- Lead third-party assessments and build fuzzing and automated testing tools, including agent-driven test generation.
- Reverse engineer firmware and protocols, contribute to design reviews, and help coordinate vulnerability response and remediation.
What they ask for
- U.S. citizenship is listed as a requirement; the ITAR section also describes other eligibility routes.
- 3–10 years of hands-on offensive security experience in penetration testing, red teaming, exploit development, or vulnerability research.
- Track record of building custom tools, harnesses, or automation, and experience combining weaknesses into realistic attack paths.
- Strong operating system, networking, and applied cryptography fundamentals; ability to read and debug unfamiliar code and own projects.
Nice to have
- Embedded or cyber-physical systems experience; embedded fuzzing, RTOS, embedded Linux, or hardware interface experience.
- AI-assisted security testing; RF, satellite links, GNSS, or ground station knowledge; or experience directing external assessments.
Pay
$160K – $200K USD base salary
Tools
SPARTA, MITRE ATT&CK, RTOS, embedded Linux, JTAG, SWD, SPI, I2C
AI focus
Build fuzzing and automated testing capability, including agent-driven test generation; experience with AI-assisted security testing is preferred.
Model-written summary · the original posting is authoritative