Application Security Engineer

About the role: By combining best-in-class autonomy and cloud connected real-time visibility, drones will become critical and ubiquitous infrastructure that can be deployed and monitored in real time to solve a variety of problems faster, cheaper, and safer than ever before. As one of the first security software engineers hired at Skydio, you will play a foundational role in defining, architecting, and developing best-in-class security infrastructure and processes at the forefront of the drone industry. You will be responsible for:

• Conducting code reviews and managing our DevSecOps security controls
• Designing and implementing defensive security controls for our products, cloud, and corporate environments 
• Deploying identity and trust management on our cloud and corporate environments

How you'll make an impact:

• Design and implement security mechanisms to protect data, authorize users, monitor systems, etc.
• Develop a deep understanding of Skydio’s technology, customers, and workflows to ensure that our products meet a wide range of security profiles (Fortune 500, government, DoD)
• Assess security of existing systems, identify technological risk, propose remediation initiatives, and plan ahead for security at scale
• Evaluate security impacts of software designs and make recommendations on infrastructure improvements necessary to uphold a high security standard
• Leverage your experience and best practices to not only uphold but improve Skydio’s engineering standards

What makes you a good fit:

• You love having fun building great products and enjoy working on systems that involves hardware and software
• You are customer focused with hands-on software development experience around writing and shipping code to solve customer problems
• You have experience building and delivering scalable and secure cloud based systems with a high proficiency in modern cloud technologies
• Direct experience with our stack (Typescript, React, Python, Terraform, C++, AWS)
• You are a security generalist with deep experience and passion for securing complex systems at enterprise scale
• Demonstrated ability to collaborate with cross-functional engineering teams (experience working with hardware development teams is a significant plus)
• Knowledge of relevant security and compliance frameworks, standards and regulations (such as SOC2, cloud security, GDPR, FedRAMP, ISO27001, etc.) a bonus