Security Engineer
- Discuss this with your agent
- Open in Claude
- Open in ChatGPT
Prepare application
- Draft this with your agent
- Open in Claude
- Open in ChatGPT
Role details
Tech stack
+23 more
Job description
You’ll be Revel’s first security engineer. There’s no existing program to inherit and no legacy decisions to work around. You’ll set the foundation for how Revel protects its platform, its infrastructure, and its customers.
Revel’s software runs test campaigns and controls hardware for teams building rockets, satellites, and energy systems. It deploys across cloud, on-prem, and air-gapped environments, often next to export-controlled programs and sensitive hardware. Our customers trust us with critical work, and you’ll be the person who makes sure that trust is earned. This isn’t a compliance-only role. You’ll spend most of your time building, and you’ll be as close to our product architecture as you are to our infrastructure.
As Revel grows, you’ll have the opportunity to build and lead the security team.
What You’ll Do
- Build the program from zero. Define Revel’s security strategy, architecture, and roadmap, then roll up your sleeves and build it. You’ll decide what matters most now and what can wait.
- Secure a platform that touches real hardware. Our software doesn’t just move data. It commands physical systems. Threat-model the product end to end, from the control software and its interfaces to the hardware it runs against. Then turn that into concrete security requirements, design reviews, and testing that ship with every release.
- Bring security into product design. Work with product and engineering leads early in the design process, so security is part of the architecture rather than bolted on before a customer review.
- Own the stack end to end. From the Linux hosts and physical systems that sit alongside real hardware in labs and at customer sites, to cloud accounts, Kubernetes clusters, CI/CD pipelines, endpoints, and SaaS tools, you’ll harden all of it. Treat security configuration as code, and automate wherever you can.
- Make secure delivery the default. Build scanning, secrets management, dependency controls, and signed, auditable releases into our pipelines, including how we deliver software into restricted and disconnected networks, without slowing engineering down.
- Stand up detection and response. Build our logging, monitoring, and alerting from scratch, and lead incident response and vulnerability management when things go wrong.
- Turn compliance into engineering. Lead Revel’s approach to ITAR, NIST 800-171, CUI handling, and CMMC. Build compliance evidence and reporting into our systems instead of maintaining spreadsheets.
- Be the security voice customers trust. Serve as Revel’s primary security contact for defense and aerospace customers, from security questionnaires to architecture reviews.
- Make everyone better at security. Partner with software and embedded engineers on threat modeling and secure design, and help every Revel employee understand their part.
- Grow the function. As the company scales, help define when and who we hire next in security, and shape what the team becomes., Mid level Mid level Aerospace * Hardware * Robotics * Software Own product and feature launches, positioning, messaging, go-to-market plans, sales enablement, and technical content. Develop collateral, case studies, thought leadership, vertical-specific messaging, and customer proof points for technical and executive audiences. Collaborate with product, engineering, sales, and design teams while tracking launch adoption, share of voice, and pipeline impact. Revel
Software Engineer
10 Days Ago In-Office or Remote USA Entry level Entry level Aerospace * Hardware * Robotics * Software Build a high-performance frontend data platform for exploring and analyzing hardware telemetry. Develop React and TypeScript applications, interactive time-series visualizations, data visualization plugins, complex application state management, and LLM-assisted analysis workflows. Collaborate directly with hardware engineers and customers to define interfaces, prototype workflows, demonstrate features, and incorporate feedback into product development. Top Skills: LlmsReactTypescript Revel
Systems Engineer
15 Days Ago In-Office or Remote USA Entry level Entry level Aerospace * Hardware * Robotics * Software Build and operate a distributed telemetry data platform for ingest, processing, indexing, compression, storage, and query. Design APIs, horizontal scaling, fault tolerance, multi-environment deployments, customer data isolation, and high-performance systems supporting petabytes of data and millions of series. Engineers own projects from design through release and operations while solving complex distributed-systems challenges on a small founding team. Top Skills: Rust
What you need to know about the Colorado Tech Scene
With a business-friendly climate and research universities like CU Boulder and Colorado State, Colorado has made a name for itself as a startup ecosystem. The state boasts a skilled workforce and high quality of life thanks to its affordable housing, vibrant cultural scene and unparalleled opportunities for outdoor recreation. Colorado is also home to the National Renewable Energy Laboratory, helping cement its status as a hub for renewable energy innovation.
Key Facts About Colorado Tech
- Number of Tech Workers: 260,000; 8.5% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Lockheed Martin, Century Link, Comcast, BAE Systems, Level 3
- Key Industries: Software, artificial intelligence, aerospace, e-commerce, fintech, healthtech
- Funding Landscape: $4.9 billion in VC funding in 2024 (Pitchbook)
- Notable Investors: Access Venture Partners, Ridgeline Ventures, Techstars, Blackhorn Ventures
- Research Centers and Universities: Colorado School of Mines, University of Colorado Boulder, University of Denver, Colorado State University, Mesa Laboratory, Space Science Institute, National Center for Atmospheric Research, National Renewable Energy Laboratory, Gottlieb Institute
Requirements
- 7+ years of hands-on security engineering experience, with real depth in infrastructure security across cloud, on-prem, and physical systems
- Experience in product or application security, including threat modeling, secure design reviews, and securing software that interacts with hardware or embedded systems
- Production experience with Infrastructure as Code (Terraform, AWS CDK, or similar) and securing CI/CD pipelines
- Experience securing containerized, cloud-native environments, including Docker and Kubernetes
- Working knowledge of NIST 800-171, CUI, and related frameworks. You know what the requirements say and how to implement them in modern infrastructure.
- Experience conducting security architecture reviews and implementing defensive controls across endpoints, SaaS apps, and infrastructure
- Proficiency in at least one general-purpose language (Python, Go, Rust, or similar). You build tools, not just configure them.
- Strong production Linux experience
- The judgment to prioritize ruthlessly and the ownership to see things through without a playbook
Nice to Have
- Previous experience as a first or early security hire
- Experience leading or managing a security team
- Experience in defense, aerospace, data centers, or other regulated environments (ITAR, CMMC, RMF, NIST 800-53, DISA STIGs, FedRAMP)
- Experience with government cloud environments (AWS GovCloud, Azure Government) or delivering software into air-gapped networks
- Experience with embedded systems security, such as secure boot, firmware signing, key management, or securing hardware-in-the-loop environments
- Hands-on experience with SIEM and EDR tools (e.g., Splunk, Panther, CrowdStrike, SentinelOne)
- Experience briefing security architectures to technical government or defense customers
Join us to redefine what’s possible in software for hardware.
ITAR Requirements To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. 1157, or (iv) Asylee under 8 U.S.C. 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here.
Benefits & conditions
Build Revel’s security program from the ground up, securing its product, infrastructure, cloud, on-premises, hardware-integrated environments, and software delivery pipelines. Responsibilities include threat modeling, security architecture, Infrastructure as Code, detection and incident response, vulnerability management, compliance with ITAR/NIST/CUI/CMMC requirements, customer security reviews, and security enablement. The role will establish foundational processes and may eventually lead a growing security team. The summary above was generated by AI About Revel
About the company
At Revel, we are revolutionizing the way the world’s most critical hardware is controlled-across aerospace, automotive, energy, and manufacturing sectors. Our next-generation software stack combines an intuitive command/control interface, a specialized programming language tailored for hardware control, and a high-performance runtime environment. We empower engineers to build, test, and deploy critical systems rapidly, reliably, and safely.
Apply for this position
This job is hosted externally. Click below to view the full posting and apply.
Prepare application
- Draft this with your agent
- Open in Claude
- Open in ChatGPT
Good distractions
Loading talks and stories from around this role…