Senior Security Engineer (Space Communications)
About Northwood:
Northwood is on a mission to transform connectivity between earth and space and bring the benefits of space to the masses through innovations in space communications technologies. If you like building quickly and seeing your work deployed in locations around the globe with real impact, we want you at Northwood.
Role:
We're building the internet for space. Help us secure it.
Northwood is deploying a global network of phased array ground stations that will fundamentally change how satellites communicate with Earth. We're talking about real-time, high-throughput space communications infrastructure that government and commercial customers depend on for mission-critical operations. We need a Senior Security Engineer to design robust security frameworks that enable rapid scaling while meeting the most demanding compliance requirements in the industry.
Responsibilities:
Build security from the ground up - You're not inheriting someone else's technical debt. Design security architectures for brand-new ground station infrastructure and space communication protocols that don't exist anywhere else.
Secure the impossible - Our phased array antennas track hundreds of satellites simultaneously across multiple orbits. Design and implement security controls for distributed systems that span continents and operate where a single failure could impact national security missions.
Own the whole stack - From RF protocols to Kubernetes clusters. Deploy enterprise SIEM solutions that can handle terabytes of satellite communications data while maintaining detailed audit trails for the most stringent compliance requirements.
Pioneer security for space communications - When you're building infrastructure that doesn't exist anywhere else, the security playbooks don't exist yet. You'll be writing them while serving as primary security liaison for Space Force and other government customers.
Lead incident response and threat hunting across a globally distributed ground station network, coordinating with engineering, network operations, and compliance teams to maintain security posture that enables mission success.
Create automated compliance pipelines that don't slow down deployment cycles - Build comprehensive security documentation and reporting standards that satisfy FedRAMP and NIST 800-171 requirements without breaking engineering velocity.
Basic Qualifications
5+ years of production experience with infrastructure as code (Terraform, AWS CDK) - You automate everything and treat security configurations like the critical code they are
Ability to obtain and maintain TS/SCI clearance
Experience conducting security architecture reviews in regulated environments where "good enough" isn't good enough
Strong knowledge of NIST 800-171, CUI, and FedRAMP frameworks - You understand the requirements but more importantly, you know how to implement them in modern cloud architectures
Familiarity with government cloud environments (AWS GovCloud, Azure Government) and CI/CD deployment pipelines that need to work across air-gapped networks
Proficiency in one or more general-purpose languages (Python, Go, Rust, etc.) - You're not just configuring tools; you're building custom security solutions
Experience implementing defensive controls for endpoints, SaaS apps, and infrastructure that operates in environments where traditional security assumptions don't apply
Preferred Qualifications
Experience building large-scale log ingestion and storage pipelines that can handle massive data volumes from distributed ground stations
Hands-on experience with SIEM (Splunk, QRadar, Sentinel, Panther) and endpoint security solutions (CrowdStrike, SentinelOne) in production environments
Strong Linux experience in production environments - Our ground stations run custom distributions
Knowledge of DFARS compliance and government contracting security requirements - You've worked where "move fast and break things" meets "don't break national security"
Familiarity with EMASS or similar government assessment tools
Demonstrated ability to own complex security projects that directly impact national security missions and interface with government customers who trust you with their most sensitive operations
Additional Information:
To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR) you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State.
Northwood is an Equal Opportunity Employer; employment with Northwood is governed on the basis of merit, competence and qualifications and will not be influenced in any manner by race, color, religion, gender, national origin/ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability or any other legally protected status.