Cybersecurity Engineer

Job Title: Cyber Security Engineer (Avionics & Ground Systems)

Company: Grid.aero

Location: Onsite 4 days/week [San Leandro, CA]

About Us

Grid.aero is a VC-backed aviation startup tackling complex challenges in both defense and commercial markets. We are focused on solving real-world problems that will shape the future of the industry. Led by aerospace veterans and supported by leading venture firms, Grid is at the forefront of developing autonomous systems that will revolutionize how goods move through the skies.

Be part of a fast-growing, high-impact startup from day one. At Grid, your work will shape critical industries, driving innovation at the intersection of national security and global commerce.

Role Overview

We are seeking a Cyber Security Engineer to join our small but mighty team. In this role, you will take ownership of the end-to-end security architecture of our autonomous aerial platform. You will lead the design, implementation, and defense hardening of aircraft-to-ground communications links, secure onboard avionics network architectures, and drive the system through the Risk Management Framework (RMF) to achieve Authority to Operate (ATO).

As an early hire, you’ll lay the cybersecurity foundation for the company’s future growth, working directly with founders and flight software teams to ensure our systems are resilient against electronic and cyber threats in contested operational environments.

What You’ll Do

• Architect and implement cryptographic protections, mutual authentication, and anti-tamper controls for bidirectional aircraft-to-ground command, telemetry, and payload datalinks (RF, SATCOM, cellular).
• Design and enforce onboard network segmentation and zero-trust policies across internal avionics buses (Ethernet, CAN, ARINC-429, serial), preventing lateral movement and securing flight-critical compute modules.
• Own the technical execution of the DoD Risk Management Framework (RMF) lifecycle (NIST SP 800-37 / 800-53, CNSSI 1253) to achieve and maintain Interim and Full Authority to Operate (ATO / IATO).
• Author and maintain security artifacts, including System Security Plans (SSP), Security Assessment Reports (SAR), Plan of Action and Milestones (POA&M), and boundary diagrams.
• Conduct vulnerability assessments, penetration testing, threat modeling, and secure code reviews across embedded flight software, ground station applications, and interface protocols.
• Collaborate directly with embedded software and avionics engineers in Hardware-in-the-Loop (HIL) simulators and participate in ground/flight test events to validate security controls in real-world scenarios.
• Participate in hardware and cryptographic module selection (e.g., TPM, HSM, NSA Type 1 or commercial FIPS-validated crypto), keeping SWaP-C and tactical operational constraints in mind.

Who You Are

• Mission-Driven: You are passionate about safeguarding critical national security assets and autonomous aerospace systems against sophisticated adversaries.
• Builder & Architect: You thrive when transforming high-level defense security requirements into lean, practical software and network implementations from the ground up.
• Pragmatic Problem Solver: You know how to balance rigorous compliance and accreditation standards with startup engineering agility and rapid iteration cycles.
• Collaborative Partner: You work well across multi-disciplinary teams—software, hardware, flight test, and government stakeholders—communicating technical risks clearly.

Key Qualifications

• 3+ years of experience in cybersecurity engineering, systems security engineering, or embedded systems security within aerospace, defense, or unmanned systems.
• Direct hands-on experience guiding tactical systems, UAS, or embedded hardware through the DoD RMF lifecycle from categorization to ATO accreditation.
• Deep understanding of secure communications protocols, PKI, key management, cryptographic suites (AES, TLS, IPsec, WireGuard), and hardening point-to-point datalinks.
• Strong background in securing onboard embedded network architectures, protocols (CAN bus, Ethernet, serial), and embedded Linux / RTOS platforms.
• Familiarity with vulnerability assessment tools, network analyzers (Wireshark), threat modeling methodologies, and static/dynamic code analysis.
• Fluency in C/C++, and working knowledge of other programming/scripting languages used in security automation and testing (Python, Bash).
• Must be a U.S. Person (U.S. Citizen or Permanent Resident) due to defense contracting and export control compliance (ITAR/EAR).

Preferred Qualifications

• Industry certifications such as CISSP, CISM, CEH, or Security+.
• Prior experience with airworthiness cybersecurity frameworks (e.g., DO-326A / DO-356A) alongside DoD RMF.
• Familiarity with Hardware-in-the-Loop (HIL) testing and live flight test security monitoring.

Why Join Grid.aero

• Mission First: Tackle some of the most important national security issues of the day.
• Ownership: Receive a significant equity stake and help build the future of Grid.aero.
• Impact: As one of our first hires, you’ll have a direct and visible impact on the security posture and operational deployment of our fleet.
• Innovation: Lead the security architecture of a game-changing product that will redefine tactical air logistics.
• Growth: Work alongside experienced aerospace founders and grow with the company as a key technical leader.

Compensation: $100k – $250k / 0.1% – 0.3% Equity