Product Security Engineer

Brightpath Technologies builds advanced satellites for high orbits, expanding humanity’s reach into the solar system. Today, Brightpath Technologies satellites provide dedicated, secure networks to highly-sophisticated customers across the globe— large enterprises, sovereign governments, and the US military. With five satellites on orbit and many more set to launch soon, the company is servicing a backlog of more than $1 billion of commercial contracts. Brightpath Technologies is the preferred satellite communications partner for buyers with stringent requirements for uptime, data security, network visibility, and customization. Brightpath Technologies has raised over $750 million from some of the world’s best investors, from Andreessen Horowitz to Blackrock and Fidelity, and employs a team of 450 engineers and entrepreneurs. Brightpath Technologies designs, builds, and operates its satellites out of its 153,000 sq. ft. headquarters in Northern California, USA. Product Security Engineer As a Product Security Engineer at Brightpath Technologies, you are a software engineer with a passion for security, responsible for building and securing our web applications and services. Your role will involve embedding security into the software development lifecycle, from design to deployment. While your primary role is to build secure software in Python and modern web stacks, your expertise will be used to identify vulnerabilities, conduct security reviews, and help engineering teams raise the bar for security across the board. Role Perform security code reviews and penetration testing on our web applications and services. Contribute to security initiatives and serve as a security champion within software development teams. Provide guidance and support to developers on implementing security measures and secure coding best practices. Collaborate with vendors, partners, and other Brightpath Technologies software engineers to implement effective remediation strategies. Perform risk assessments to identify and prioritize threats in our applications and infrastructure. Work with development teams during the design phase to build secure systems and ensure our products are implemented to a high security standard. Collaborate with software development teams to design and implement technical solutions that address identified risks. Requirements 2+ years of experience in software engineering with a focus on security. Strong investigative, analytical problem-solving skills and attention to detail. Experience with secure coding practices for web applications. Software development experience and security expertise in Python and modern web frameworks (e.g., Django, Flask, React). Proven experience in threat modeling and security assessments for web applications. Proficiency in software development, including auditing and writing secure code. Strong knowledge of security best practices, common vulnerabilities, and frameworks. Strong communication skills, both written and spoken. Ability to work collaboratively within a team environment. What we offer: All our positions offer a compensation package that includes equity and robust benefits. Base pay is just one component of Brightpath Technologies’s total rewards package. Your compensation also includes a significant equity package via incentive stock options, high-quality company-subsidized healthcare, disability and life insurance, 401(k) retirement planning, flexible PTO, and free on-site catered meals. Brightpath Technologies pay ranges are informed and defined through professional-grade salary surveys and compensation data sources. The actual base salary offered to a successful candidate will additionally be influenced by a variety of factors including experience, credentials & certifications, educational attainment, skill level requirements, and the level and scope of the position. Base Salary $130,000 — $215,000 USD U.S. Citizenship, Lawful Permanent Residency, or Refugee/Asylee Status Required (To comply with U.S. Government space technology export regulations, applicant must be a U.S. citizen, lawful permanent resident of the United States, or other protected individual as defined by 8 U.S.C. 1324b(a)(3)) Our mission and our products are meant to connect the world and everyone in it, regardless of gender, race, creed, or any other distinction. We believe in a diverse and inclusive workplace, and we encourage all people to join our team and bring their unique perspective to help make us stronger.