Principal Security Design Engineer

## Company Overview Iridium is an award-winning satellite communications company operating the world's only truly global voice and data network, delivering reliable connectivity anywhere on Earth. For more than 20 years, Iridium has powered mission-critical communications for governments, businesses, aviation, maritime, and the rapidly expanding Internet of Things.

Now part of Iridium, Aireon is the world’s only space-based air traffic surveillance system, providing real-time visibility of aircraft over oceans, the poles, and remote regions. Together, Iridium and Aireon are helping build a safer, more connected, and more efficient future for global aviation. Join our team and help shape how the world stays connected.

We foster a collaborative, inclusive culture where employees are empowered to innovate, grow professionally, and make a meaningful impact. ## What We’re Looking For Iridium is building security‑critical infrastructure for a new service currently in low‑visibility proof‑of‑concept engagements with prospective partners.

We are seeking a Principal Security Engineer to join at the earliest stage and ensure security is designed correctly from the start. This role provides deep adversarial and architectural expertise, identifying how this service could be attacked and guiding how we defend it.

You will work as a principal‑level technical peer to engineering, influence early design decisions, drive red‑team style assessments, and serve as a tier‑2 subject‑matter expert in select partner and customer conversations.

As one of the first security specialists on the team, you will help establish early security practices and a threat‑modeling culture that will scale as the team grows. ## Security Architecture & Threat Modeling - Analyze our AWS-based cloud infrastructure, APIs, and supporting services to identify realistic attack paths and translate findings into clear defensive priorities. - Advise engineering leadership on secure design decisions across cloud infrastructure, application logic, and device/key‑management touchpoints early in the development lifecycle. - Develop and maintain service‑specific threat models and guide an emerging threat‑modeling culture for a small, fast‑moving pre‑launch engineering team. ## Adversarial Testing & Red Team Assessments - Conduct or commission red‑team style assessments spanning network, application, cloud configuration, identity flows, and adjacent supply‑chain vectors. - Communicate security findings in terms of business impact, driving pragmatic prioritization and informed decision‑ ## Identity & Access Flow Security - Evaluate how Iridium’s service integrates into partner identity and access systems (SAML, OIDC, OAuth 2.0, WebAuthn, CTAP). - Identify how these integrations could be attacked, misused, or strengthened, particularly in step‑up authentication and assurance contexts. ## Cross‑Functional & External Influence - Serve as a tier‑2 security SME in select partner or prospective‑customer conversations where deep technical expertise is required beyond sales engineering capabilities. - Collaborate closely with engineering, product, and partner‑facing teams to ensure security decisions are incorporated throughout the service architecture. - Foundational Security Practices & Mentorship - Help establish early security practices, lightweight processes, and technical standards appropriate for a pre‑launch product environment. - Provide mentorship and guidance to engineers and future security team members as the capability grows. ## What You’ll Need to Succeed - 10+ years of experience in network and information security, with demonstrated depth in offensive or adversarial security; red team experience strongly preferred. - Strong applied expertise in AWS security fundamentals (IAM, VPC architecture, common cloud misconfigurations and exploitation patterns). - Solid hands on understanding of modern identity and access protocols (SAML, OIDC, OAuth 2.0, WebAuthn, CTAP), including how these flows can be attacked or strengthened. - Demonstrated ability to communicate security risk clearly to both engineers and non technical stakeholders, including customers and partners. - Experience operating as an individual contributor in a high ambiguity, high trust, small team environment. - Excellent communication skills, with the ability to convey products, deliverables, analyses, and/or issues clearly and confidently, and recognize and adapt to different communication techniques - Can easily build meaningful relationships with others, including senior leadership outside of your own department, and comfortable providing constructive feedback to your team members and management - Be able to analyze a situation or problem, generate effective solutions, and see those solutions through to completion - Must possess the creativity and resourcefulness needed to make reliable decisions and determine methods on new assignments - Can thrive in a dynamic environment by handling multiple tasks and managing shifting priorities - Be proactive in sharing knowledge you’ve learned with others ## Things That Would be Great if You Brought to the Table - Experience with hardware root‑of‑trust, secure elements, or embedded device attestation concepts. - Experience in regulated or compliance‑sensitive industries (financial services, gaming/gambling, critical infrastructure). - Industry certifications (OSCP, CISSP, or similar) are welcome but not a substitute for demonstrated hands‑on depth. - Active security clearance not required; ability to obtain and maintain one is a plus. ## We’ll also need you to - Be able to travel up to 20% - This position directly performs under, supports, or is exposed to a U.S. government contract.

To comply with the requirements of that U.S. government contract, applicants for this position must be U.S. citizen ## Work Environment This position primarily works in an office setting and is largely sedentary with the majority of the position working with a computer. The role typically requires the use of basic office equipment such as a phone, video, computer, keyboard, mouse, and printer.

We believe in-person connection drives innovation, strengthens mentorship, and builds culture, while flexibility enables employees to do their best work.

Under Iridium’s Hybrid Work Policy, employees are expected to work at least four days per week (approximately 80%) in an Iridium office to support collaboration, relationship-building, and professional growth. ## Additional Information This job description outlines the general nature and level of work for this role and is not a comprehensive list of duties, responsibilities, or qualifications.

Employees may be assigned additional responsibilities as needed. Base Pay Range: $150,000 - $195,000 USD Actual compensation will be determined based on a variety of factors and this range represents an estimate of compensation at the time of posting. Base salary is only one part of our compensation package for this role. You may also be eligible for company stock and annual bonus.

Employee benefits also include medical, dental, and vision insurance coverage; 401(k) retirement plan options; paid time off and paid holidays; paid parental leave; and other discounts and perks.