Senior Offensive Security Engineer
$160k - $230k USD
Astranis builds advanced satellites for high orbits, expanding humanity’s reach into the solar system. Today, Astranis satellites provide dedicated, secure networks to highly-sophisticated customers across the globe— large enterprises, sovereign governments, and the US military. With five satellites on orbit and many more set to launch soon, the company is servicing a backlog of more than $1 billion of commercial contracts.
Astranis is the preferred satellite communications partner for buyers with stringent requirements for uptime, data security, network visibility, and customization. Astranis has raised over $750 million from some of the world’s best investors, from Andreessen Horowitz to Blackrock and Fidelity, and employs a team of 450 engineers and entrepreneurs. Astranis designs, builds, and operates its satellites out of its 153,000 sq. ft. headquarters in Northern California, USA.
Senior Offensive Security Engineer
As a Senior Offensive Security Engineer, you will lead penetration testing and adversarial simulation efforts targeting our applications, cloud infrastructure, and corporate networks. You will emulate real-world attackers to identify weaknesses across the software and IT stack, and work closely with engineering and IT teams to improve our defenses. Your focus is offensive testing of application and enterprise systems.
Role
- Offensive & Penetration Testing (Primary)
- Perform penetration tests of web apps, APIs, backend services, cloud infrastructure, and corporate networks.
- Conduct threat emulation exercises, red-team scenarios, and targeted attack simulations.
- Assess CI/CD pipelines, IAM configurations, and internal services for exploitable weaknesses.
- Lead offensive security initiatives and serve as the organization’s primary expert for AppSec and enterprise pentesting.
- Security Research & Adversarial Analysis
- Track emerging threats, techniques, and vulnerabilities relevant to cloud and enterprise environments.
- Develop custom exploits or proof-of-concepts as needed to validate findings.
- Collaboration & Remediation Support
- Work with development, infra, and IT teams to validate controls and guide effective remediation.
- Provide actionable risk assessments from an attacker’s perspective.
- Contribute offensive insights to secure system design guidance.
- General Product Security Support (Secondary)
- Assist with code review and threat modeling for software components when offensive insights are needed.
Requirements
- 5+ years of hands-on offensive security experience (AppSec, cloud, or enterprise penetration testing).
- Demonstrated experience leading complex penetration tests for web apps, APIs, and cloud platforms.
- Strong proficiency in offensive tooling (Burp Suite, Nmap, Metasploit, proxy tools, etc.) and manual testing techniques.
- Familiarity with cloud-native attack vectors (AWS/Azure/GCP).
- Proficiency in at least one scripting or exploitation-oriented language (Python, Go, JavaScript, etc.).
- Strong analytical and problem-solving skills with an attacker’s mindset.
- Ability to explain complex technical vulnerabilities to a range of audiences.
What we offer:
All our positions offer a compensation package that includes equity and robust benefits.
Base pay is just one component of Astranis’s total rewards package. Your compensation also includes a significant equity package via incentive stock options, high-quality company-subsidized healthcare, disability and life insurance, 401(k) retirement planning, flexible PTO, and free on-site catered meals.
Astranis pay ranges are informed and defined through professional-grade salary surveys and compensation data sources. The actual base salary offered to a successful candidate will additionally be influenced by a variety of factors including experience, credentials & certifications, educational attainment, skill level requirements, and the level and scope of the position.
Base Salary
$160,000—$230,000 USD
U.S. Citizenship, Lawful Permanent Residency, or Refugee/Asylee Status Required
(To comply with U.S. Government space technology export regulations, applicant must be a U.S. citizen, lawful permanent resident of the United States, or other protected individual as defined by 8 U.S.C. 1324b(a)(3))
Our mission and our products are meant to connect the world and everyone in it, regardless of gender, race, creed, or any other distinction. We believe in a diverse and inclusive workplace, and we encourage all people to join our team and bring their unique perspective to help make us stronger.