About Forterra Forterra is a leading provider of autonomous systems for ground-based movement in the working world. Backed by SoftBank VF.
About the role
Forterra is unleashing autonomy at scale to transform the battlefield, and the systems we field have to be trusted in the most contested, disconnected environments on earth. We're seeking a Senior Engineer, Product Security to own product security for a program end-to-end: someone who can walk in, take the wheel, and be the single security authority in front of both our engineers and a government cyber or program office. Found on 1752vc Careers, the job board for startup and VC roles.
What they're looking for
- Define, write, and trace security requirements through systems-engineering processes, including requirements and design reviews and verification and validation, so security is built in and demonstrably met
- Lead threat modeling across autonomy, embedded, and command-and-control systems, and drive risk assessments that weigh mitigations against mission needs
- Engineering owns hands-on-keyboard hardening, you own the expertise, the requirement translation, and the authorization case
- Partner in software supply-chain security, SBOMs, and the secure SDLC (SAST/DAST, code review, CI/CD) helping move the program toward a DevSecOps pipeline built for security
- Audit embedded and application code for vulnerabilities, drive remediation with internal teams and vendors, and collaborate across systems, safety, test, and DevOps to meet product- and program-level security needs
- 5+ years in security engineering or a closely related field, with the depth to be the security decision-maker on a program. Equivalent demonstrated skill will be considered in lieu of exact tenure
More about this role
About the role
Forterra is unleashing autonomy at scale to transform the battlefield, and the systems we field have to be trusted in the most contested, disconnected environments on earth. We're seeking a Senior Engineer, Product Security to own product security for a program end-to-end: someone who can walk in, take the wheel, and be the single security authority in front of both our engineers and a government cyber or program office.
This is a hands-on, senior individual-contributor role, not a paper-compliance seat. You'll own the RMF and ATO process for your program(s) and shape the secure architecture behind it, proposing controls, writing requirements, and driving security uplift across hardware and software. When an engineer asks why a control matters, you can explain the threat and the mission rationale; when they ask how, you can give them an implementable answer. On the functions you don't build yourself, you own the solutioning and verify the implementation. You're as at home in the guts of an embedded system as you are reasoning about a CI/CD pipeline, and you know how to secure systems that live on air-gapped, offline, and intermittently connected networks. You'll...
Browse similar: Startup jobs