SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Beacon AI is building an AI platform to make flying safer, more efficient, and more capable. The company is backed by top investors, has secured a dozen Department of Defense contracts, and partners with major airlines to deliver mission-critical systems.
You will serve as a Senior Security Engineer responsible for ensuring the security and integrity of Beacon AI's systems and data across commercial and Department of Defense environments. This is a hands-on security engineering role focused on designing and operating secure systems, partnering closely with software teams, and protecting mission-critical flight safety technology while meeting applicable security and compliance standards, including FedRAMP and DoD Impact Level requirements.
Key responsibilities include:
- Design and implement secure architectures across applications, cloud infrastructure, backend services, and in-cockpit edge systems, including FedRAMP Moderate baseline and DoD IL4/IL5 environments
- Protect sensitive data through strong controls for access management, encryption, and secure data handling, consistent with NIST 800-53 and NIST 800-171 requirements
- Identify, assess, and mitigate security risks through vulnerability assessments, penetration testing, and security reviews
- Lead incident response efforts, including detection, containment, remediation, and follow-up analysis
- Integrate security into the SDLC by partnering with software teams on threat modeling, secure code review, and automated security checks in CI/CD and infrastructure-as-code
- Implement and operate security monitoring and logging to detect and respond to threats in real time
- Support authorization and compliance efforts (ATO packages, SSPs, POA&Ms) for FedRAMP and DoD accreditation processes
- Help maintain CMMC 2.0 readiness and alignment with DFARS cybersecurity clauses
- Secure AI systems, including LLM and retrieval-based features, against risks like prompt injection, data leakage, and model misuse
The role is hybrid, based in San Carlos, CA, with 3+ days per week onsite and the option to work remotely on remaining days.
REQUIREMENTS:
- 5+ years of hands-on experience in security engineering roles securing complex systems and data, including production cloud environments (AWS or AWS GovCloud strongly preferred)
- Strong knowledge of security principles, threat modeling, and defensive security practices
- Experience with common security tools and technologies (e.g., SIEM, IDS/IPS, vulnerability scanning, encryption)
- Familiarity with security and compliance frameworks such as NIST 800-53/800-171, ISO 27001, and CMMC
- Direct experience with FedRAMP authorization processes (ATO, SSP, POA&M) and/or DoD Impact Level (IL4/IL5) environments
- Comfort being an early security owner: setting priorities, building from scratch, and balancing risk against a fast-moving product roadmap
- Proven ability to collaborate effectively with software engineers on secure system design
- Hands-on mindset with strong analytical and problem-solving skills
BONUS:
- Passion for aviation and a desire to improve air travel efficiency and safety
- Experience working with aviation, aerospace, or DoD customers, particularly in ITAR-controlled environments
- Familiarity with zero trust architectures or advanced security approaches
- Experience with StateRAMP, IL5/IL6 systems, or classified/controlled unclassified information (CUI) handling
- Experience securing mobile (iOS), embedded, or edge devices operating in disconnected or constrained environments
- Relevant security certifications such as CISSP, CISM, or CEH
Note: Due to U.S. export control regulations, only U.S. Persons (U.S. citizens, Green Card holders, lawful permanent residents, or individuals granted asylum or refugee status) can be hired. No visa sponsorship or support for visa transfers. All work must be performed in the United States.
