Sr. Security Engineer

Rainmaker Technology Corporation is seeking a Sr. Security Engineer to embed security into software, hardware, and field operations. The role emphasizes secure-by-default practices across AWS and application systems, automation of controls and verification, and stronger detections and incident response for aircraft and field teams.

Key Responsibilities

• Identify critical systems, data flows, and access paths, then translate top risks into an actionable plan.
• Partner with platform engineers to build reusable, secure-by-default AWS infrastructure, including least-privilege access, network boundaries, and logging for scientific and operational systems.
• Assess application designs and code, develop reusable authentication and authorization patterns, and address vulnerabilities at their source.
• Automate access provisioning and revocation, secrets management, and credential rotation across production and company systems, including audit trails and defined recovery paths.
• Integrate security checks into development and deployment workflows to identify exposed secrets, vulnerable dependencies, and unsafe configuration changes prior to release.
• Create practical detections and automate evidence gathering for investigations, and coordinate with system owners to test incident response and recovery.
• Improve Google Workspace and device configurations to be secure by default, supporting onboarding and offboarding workflows with People and Operations.
• Collaborate with aircraft and field teams to support secure remote access and communications for systems with intermittent connectivity.
• Test, monitor, and document security automation so other engineers can maintain it, including simplifying controls that cause unnecessary alerts, exceptions, or repetitive manual work.

Required Qualifications

• Production experience building and maintaining security automation, including measurable risk reduction, testing approach, failure handling, and manual work elimination.
• Strong software engineering skills in Python, TypeScript, or a comparable language, with experience in testing, code review, deployment, and operating built systems.
• Hands-on cloud security experience, including the ability to implement access policies, network boundaries, and logging requirements using infrastructure as code.
• Practical knowledge of application security, authentication and authorization, secrets management, and common web and API vulnerabilities.
• Experience investigating security findings and driving fixes through to deployment and verification.
• Judgment regarding risk, reliability, and maintenance costs, including choosing simple, effective controls and clearly explaining timing of changes.
• Ability to work independently, communicate clearly with engineers and non-engineers, and complete work that spans multiple teams.

Technologies

• AWS
• Python
• TypeScript
• Google Workspace
• Terraform
• Pulumi
• GitHub
• Buildkite
• Tailscale
• WireGuard

Location and Salary

Location: El Segundo, CA (onsite)

Compensation: USD 128,000 - 225,000 per year

Benefits

• Meaningful stock options and the opportunity to help shape Rainmaker as an early member of the team.
• Comprehensive medical, dental, and vision insurance.
• A 401(k) with employer matching.
• Unlimited PTO.
• Paid parental leave for both parents.
• Daily lunch provided at the El Segundo headquarters.
• Relocation assistance for eligible roles.

What Will Set You Apart

• Experience with AWS, Pulumi or Terraform, and GitHub or Buildkite deployment workflows.
• Experience with Tailscale or WireGuard.
• Security work involving robotics, aerospace, scientific computing, or remote field systems.
• Experience building self-service security tools or reusable controls adopted by other engineering teams.

First 90 Days: Success Metrics

• Mapped critical systems and access paths, and aligned with the team on highest-priority risks.
• Deployed a secure configuration or access control on a critical system with tests that prevent unsafe changes.
• Launched one recurring security workflow running automatically, including monitoring, a tested recovery path, and documentation for low-intervention operation.
• Tested a detection and response path with the engineers who will use it and agreed on next improvements.