Castelion
Product Security Architect, Embedded Systems
Torrance, CA +1 · Full-time · Posted Sep 7, 2026
- Location
- Torrance, CA
19951 Mariner Ave, Torance, CA 90503 - Experience
- 8+ years of professional software engineering experience; exposure to applied cryptography or security engineering.
- Education
- Bachelor’s degree in Computer Science, Computer Engineering, Electrical Engineering, or related STEM field.
- Visa sponsorship
- Employment is contingent upon the candidate’s ability to access applicable export-controlled information without additional export licensing. The role may require a U.S. Government security clearance or other authorization and any applicable citizenship or eligibility requirements if designated.
About the job
Architects and implements cryptographic security for embedded flight systems, covering boot integrity, encryption, signing, key management, and secure communications from manufacturing through flight operations.
What you'll do
- Design secure boot chains, hardware-backed roots of trust, firmware verification, and secure update workflows.
- Develop cryptographic systems and secure communications, and design key generation, storage, rotation, and provisioning.
- Conduct threat modeling and security reviews; partner with engineering teams to integrate security across system architecture.
What they ask for
- Bachelor’s degree in Computer Science, Computer Engineering, Electrical Engineering, or related STEM field.
- 8+ years of professional software engineering experience with exposure to applied cryptography or security engineering.
- Experience implementing encryption, authentication, or digital signatures in C, C++, Rust, or similar systems languages.
- Strong understanding of PKI, TLS, key exchange, hashing, and signatures; experience in Linux-based or embedded environments.
Nice to have
- Experience with secure boot, hardware roots of trust, code signing, TPMs, HSMs, or secure elements.
- Experience in embedded, aerospace, defense, safety-critical systems, manufacturing provisioning, or constrained real-time devices.
Tools
C, C++, Rust, Linux, PKI, TLS, TPMs, HSMs
Model-written summary · the original posting is authoritative