SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Apex manufactures satellite buses at scale—the spacecraft platforms that hold customer payloads and enable earth observation, communications, and other critical missions. As Red Team Engineer in Product Security, you will conduct adversarial testing across the full stack: spacecraft, flight software, ground stations, cloud command-and-control systems, and the manufacturing pipelines that produce them.
This is a hands-on offensive security role focused on finding weaknesses before adversaries do. You will plan and execute red team exercises using SPARTA and MITRE ATT&CK frameworks, looking for attack paths that cross system boundaries (e.g., ground-system compromise leading to spacecraft control). You will lead third-party security assessments—scoping work, providing engineering support, and synthesizing results. You will design and build fuzzing and automated testing capabilities that run with every release. You will reverse-engineer firmware and protocols, analyze embedded hardware interfaces, and review cryptographic implementations.
You will join design reviews to show how proposed designs could be attacked before they are built, co-chair the product security incident response process, and work with engineering teams to fix root causes and build security thinking across the organization.
You are the second core member of a small Product Security team with significant organizational footprint, reporting to the Product Security Architect and collaborating with security engineers embedded in flight software, ground software, and infrastructure teams.
APEX CONTEXT
Apex is a fast-growing, well-funded ($500M+) startup manufacturing commercial spacecraft platforms. In this industry, a security failure can cost an entire mission, making proactive security assessment critical.
REQUIREMENTS
- US Citizenship (ITAR requirement)
- 3–10 years of hands-on offensive security experience: penetration testing, red teaming, exploit development, or vulnerability research
- Track record of building custom tools, harnesses, or automation when off-the-shelf solutions are insufficient
- Demonstrated ability to chain multiple smaller weaknesses into realistic, end-to-end attack paths
- Solid fundamentals in operating systems, networking, and applied cryptography; comfort reading and debugging unfamiliar code
- Ability to own technical projects from start to finish with minimal direction
- Clear communication skills for both technical explanations to engineers and risk communication to leadership
PREFERRED
- Experience with embedded or cyber-physical systems in space, aerospace, automotive, robotics, industrial/OT, medical devices, or autonomous vehicles
- Experience building fuzzing harnesses for embedded or protocol targets; familiarity with RTOS, embedded Linux, or hardware interfaces (JTAG, SWD, SPI, I2C, CAN)
- Experience with AI-assisted security testing
- Knowledge of RF and satellite command links, GNSS spoofing/jamming, or ground station architecture
- Experience scoping or directing outside assessment firms
- Public security work: CVEs, published research, conference talks, CTF results, or space security training (e.g., Hack The Box Satellite Exploitation track)
- Eligibility for US security clearance (active clearance not required; role focuses on unclassified work)
