Product Security Architect (34252)

Product Security Architect

We are seeking a highly skilled and motivated Product Security Architect to join our team and help secure next-generation satellite systems. Reporting to the Senior Manager, Product Security, you will be responsible for embedding security throughout the product lifecycle — from design and development to deployment and operations — ensuring the integrity, confidentiality, and availability of our space and ground-based assets.

Main Responsibilities

• Threat Modeling & Risk Assessment: Conduct threat modeling and security risk assessments for satellite hardware, software, and communication systems.
• Secure Design & Architecture: Collaborate with engineering teams to design secure systems, including onboard satellite software, ground control systems, and data links.
• Vulnerability Management: Evaluate and support remediation efforts related to vulnerabilities in embedded systems, firmware, and satellite communication protocols.
• Security Testing: Propose test use cases and review testing results for assessments such as penetration testing, fuzzing, and static/dynamic code analysis on satellite and ground systems.
• Compliance & Standards: Ensure compliance with industry standards/frameworks such as NIST, ISO 27001, and space-specific cybersecurity frameworks (e.g., CCSDS, CNSSI 1253).
• Incident Response: Create concepts of operation for incident detection, analysis, and response to security events affecting satellite products.
• Tooling & Automation: Ensure the software development lifecycle follows industry best practices and utilize appropriate security tools to automate security checks.
• Collaboration: Work cross-functionally with software, hardware, systems, and mission assurance teams to champion security best practices.
  
  

Education/Experience

• Bachelor’s or Master’s degree in Computer Science, Electrical Engineering, Cybersecurity, or a related field.
• 10+ years of experience in product or embedded security architecture.
• Experience in the aerospace or satellite industry.
• Certifications such as CISSP, OSCP, CEH, or GIAC.
  
  

Specialized Knowledge, Skills And Abilities

• Strong understanding of embedded systems security, real-time operating systems (RTOS), and secure communications.
• Knowledge of space system architectures, including satellite buses, payloads, and ground stations.
• Extensive understanding of the space industry threat landscape.
• Experience with security tools (e.g., SAST, DAST, Splunk).
• Knowledge of cybersecurity frameworks (e.g., NIST 800-53, ISO/IEC 27001).
• Familiarity with space situational awareness (SSA) and anti-jamming/anti-spoofing techniques.
• Experience with DevSecOps in aerospace environments.
  
  

, : Mike Gebara