Castelion
Software Security Engineer
Torrance, CA +1 · Full-time · Posted Sep 7, 2026
- Location
- Torrance, CA
19951 Mariner Ave, Torance, CA 90503 - Experience
- 3+ years of professional software engineering experience with exposure to applied cryptography or security engineering.
- Education
- Bachelor’s degree in Computer Science, Computer Engineering, Electrical Engineering, or related STEM field.
- Visa sponsorship
- No specific visa policy stated. Classified work may require security clearance or government authorization and applicable citizenship or other eligibility; export-controlled access is required without additional export licensing.
About the job
Build and integrate cryptographic security foundations—including encryption, secure boot, code signing, and key management—for embedded flight systems across development, manufacturing, and flight operations.
What you'll do
- Design secure boot chains, hardware-backed roots of trust, firmware verification, and secure update workflows.
- Develop cryptographic protocols and secure communications; design key generation, storage, rotation, and provisioning systems.
- Threat-model and review the software stack, implement mitigations, and integrate security with embedded, avionics, hardware, and infrastructure teams.
What they ask for
- Bachelor’s degree in Computer Science, Computer Engineering, Electrical Engineering, or related STEM field.
- 3+ years of professional experience in software engineering with exposure to applied cryptography or security engineering.
- Experience implementing encryption, authentication, or digital signature systems in C, C++, Rust, or similar systems languages.
- Strong understanding of cryptographic fundamentals (PKI, TLS, key exchange, hashing, signatures) and experience in Linux-based or embedded environments.
Nice to have
- Experience with secure boot or hardware roots of trust, code signing, TPMs, HSMs, or secure elements.
- Experience in embedded, aerospace, defense, safety-critical, or manufacturing provisioning systems; familiarity with real-time systems, mTLS, certificate lifecycle management, or replay protection.
Tools
C, C++, Rust, Linux, PKI, TLS, TPMs, HSMs
Model-written summary · the original posting is authoritative