Security Software Engineer

Who you are

• 3+ years of experience in a software, security, infrastructure, or platform engineering role
• Strong coding ability, with experience building and maintaining tooling in languages such as Python or Go
• Experience automating workflows and integrating systems via APIs
• Working knowledge of cloud environments (ideally AWS), including how security and identity controls are implemented
• Interest in engineering solutions to security and compliance problems rather than managing them manually
• Comfort operating across both design and hands-on implementation, with an eagerness to grow into broader security engineering work over time
• This position requires access to export-controlled technology, technical data, and/or controlled information, including information subject to the International Traffic in Arms Regulations (ITAR), Export Administration Regulations (EAR), and/or U.S. government contract requirements
• Candidates must be eligible to access such information without additional U.S. government authorization, unless the company determines that any required authorization can be obtained
• Experience building or automating tooling for security platforms (SIEM, IAM/IdP, vulnerability management, EDR, and cloud security tools)
• Experience with compliance automation or GRC tooling (e.g., evidence collection, continuous control monitoring)
• Experience working in or automating for FedRAMP, SOC 2, ISO 27001, Texas RAMP, or CJIS-aligned environments
• Experience with Kubernetes debugging, operations, or automation
• Background supporting government, defense, or other highly regulated customers
• Obtaining FAA Part 107 certification within the first 60 days of employment is strongly encouraged for all Skydio employees and required for certain positions

What the job involves

• As a Security Engineer on Skydio's Security team, you'll build the automation and internal tooling that keep our multi-tenant cloud and corporate environments secure and audit-ready
• You'll write code that operates security controls, integrates identity and cloud systems, SCIM provisioning, vulnerability scanning, automated evidence collection and replaces manual, time-intensive processes with reliable engineering
• You'll start with high-impact automation work such as making security and compliance controls run, report, and self-remediate without manual effort and grow into broader security engineering across the team over time, from system design and architecture to hardening our production security capabilities
• If you're an engineer who wants to solve real security and automation problems end to end, this role gives you the room to build
• Design and build automation that operates and enforces security controls by integrating cloud, infrastructure, and identity systems so controls run, and where possible self-remediate, without manual intervention
• Build tooling and integrations across cloud APIs, identity providers (e.g., SCIM provisioning), vulnerability scanners, and ticketing systems into a coherent, automated system
• Automate how we collect, validate, and report compliance evidence continuously across our cloud and corporate environments
• Build dashboards and pipelines that give real-time visibility into control status, gaps, and audit readiness
• As part of Security and GRC, translate framework requirements into practical, testable, code-driven controls
• Improve how we monitor, prioritize, patch, and respond to vulnerabilities across our cloud footprint
• Over time, design and build internal security systems end to end (e.g., vulnerability risk management, web application firewalls), review RFCs, and partner with engineering teams on architecturally significant, security-relevant decisions
• Participate in the security team's on-call rotation