Staff Security Engineer

Senior Security Engineer, Autonomous Vessels

Dive into the future of maritime security! Saronic Technologies is revolutionizing autonomy at sea, developing state-of-the-art intelligent platforms that redefine ocean operations. We're building the next generation of autonomous surface vessels, and we need a pioneering Senior Security Engineer to ensure they are secure by design, resilient in operation, and trusted by our partners.

At Saronic, security isn't just a function; it's a force multiplier that directly enables our mission. This isn't a GRC or project management role – it's a deeply technical, hands-on security engineering position where you will own the entire product security and authorization lifecycle for our autonomous surface vessels. You will be the responsible security engineer for one or more vessel programs, steering their security posture from initial design through production, authorization, and operational deployment.

This is a unique opportunity to shape an emerging field. The landscape of security compliance for autonomous surface vessels is still being written. DoD authorization processes are evolving, commercial maritime regulators are drafting the MASS Code, and classification societies are just beginning to issue autonomous vessel certifications. You will be at the forefront, identifying and interpreting applicable frameworks, architecting the vessel's security to meet these demands, and driving authorization to completion. Where standards don't yet exist, you will define them.

Your Mission:

Serve as the primary security engineer for one or more vessel programs, owning their end-to-end security posture from architecture and design through fielding and operational deployment.
Lead threat modeling exercises across complex vessel subsystems, including embedded compute, communications, navigation, propulsion controls, sensor fusion, and C2 interfaces, defining robust security architectures, trust boundaries, and segmentation strategies based on your findings.
Identify, analyze, and mitigate advanced security risks unique to autonomous maritime platforms, such as GPS/GNSS spoofing, sophisticated RF interference, sensor manipulation, supply chain compromise, and physical access threats.
Drive the complete authorization lifecycle for vessel programs, from initial security planning and control implementation through Authority to Operate (ATO) or equivalent customer authorization milestones.
Expertly navigate and apply DoD cybersecurity authorization frameworks, including RMF, CSRMC, and service-specific requirements across Navy, Coast Guard, Marine Corps, and joint programs.
Develop and maintain comprehensive authorization artifacts, detailed security documentation, and robust evidence packages that rigorously satisfy Authorizing Officials and program offices.
Proactively identify and map applicable compliance frameworks for each vessel and customer segment, including NIST SP 800-53, NIST SP 800-171, CMMC 2.0, FedRAMP, IEC 62443, IMO MASS Code, and IACS UR E26/E27. Where standards are emerging, you will define Saronic's compliance posture.
Represent Saronic's security posture as a credible technical expert in direct engagements with government program offices, Authorizing Officials, DOT&E evaluators, and classification societies.
Support critical cybersecurity testing and evaluation efforts, including thorough preparation for operational test events, red team assessments, and cooperative vulnerability assessments.
Partner closely with supply chain and manufacturing teams to integrate hardware provenance, firmware integrity, and anti-tamper requirements into production vessels.
Collaborate with Legal and Contracts teams to ensure security and compliance requirements are accurately reflected and upheld in customer agreements, proposals, and contract deliverables.

What You Bring:
Required Qualifications:

6+ years of hands-on experience in product security, systems security engineering, authorization engineering, or a closely related security engineering role for defense or high-assurance platforms.
Strong understanding of DoD cybersecurity authorization processes (RMF, ATO/IATT, CSRMC, continuous ATO) with demonstrated experience contributing to or directly driving systems through authorization.
Working knowledge of NIST SP 800-53, NIST SP 800-171, and CMMC 2.0, and their practical application to weapons systems, autonomous platforms, or similarly complex defense products.
Proven experience with threat modeling, security architecture, or risk assessment specifically for cyber-physical systems, embedded systems, or operational technology environments.
A strong technical foundation, enabling you to interpret architecture diagrams, evaluate security controls at a systems level, and engage in credible technical conversations with hardware, software, and cloud engineers.
Exceptional ability to clearly communicate complex technical and non-technical information to diverse stakeholders, including the production of high-quality security documentation and authorization artifacts.
An ownership mindset with the ability to thrive in ambiguity, define clear paths forward, and drive work to completion collaboratively across multiple teams.
Ability to obtain and maintain a security clearance.

Preferred Qualifications:

Experience as a product security lead, systems security engineer, or authorization lead for a defense platform or program of record.
Direct experience engaging with government Authorizing Officials, program offices, or DOT&E as a technical security representative.
Experience within defense technology startups, DARPA programs, or organizations that operate with speed and agility within the defense acquisition system.
Familiarity with maritime-specific frameworks, including IMO MASS Code, IACS UR E26/E27, IEC 62443, or classification society autonomous vessel rules.
Deep understanding of autonomous systems security challenges, including communications security, electronic warfare hardening, GPS/GNSS resilience, and AI/ML system security.
Experience with ITAR/EAR compliance, supply chain security, or manufacturing security for defense products.
Familiarity with the defense acquisition lifecycle and how authorization milestones integrate effectively into program schedules.

Benefits:

Medical Insurance: Comprehensive health insurance plans covering a range of services. Saronic pays 100% of the premium for employees and 80% for dependents.
Dental and Vision Insurance: Coverage for routine dental check-ups, orthodontics, and vision care. Saronic pays 100% of the premium under the basic plan for employees and 80% for dependents.
Time Off: Generous Paid Time Off (PTO) and company holidays.
Parental Leave: Paid maternity and paternity leave to support new parents.
Competitive Salary: Industry-standard salaries with opportunities for performance-based bonuses.
Retirement Plan: 401(k) plan to help you plan for your future.
Stock Options: Equity options to give employees a direct stake in the company’s success and growth.
Life and Disability Insurance: Basic life insurance and short- and long-term disability coverage for your peace of mind.
Pet Insurance: Discounted pet insurance options, including a 24/7 Telehealth helpline.
Additional Perks: Enjoy a free lunch benefit and unlimited free drinks and snacks in the office.

If this role is based in the United States, it requires access to export-controlled information or items that require “U.S. Person” status. As defined by U.S. law, individuals who are any one of the following are considered to be a “U.S. Person”: (1) U.S. citizens, (2) legal permanent residents (a.k.a. green card holders), and (3) certain protected classes of asylees and refugees, as defined in 8 U.S.C. 1324b(a)(3).

Saronic does not discriminate on the basis of race, sex, color, religion, age, national origin, marital status, disability, veteran status, genetic information, sexual orientation, gender identity or any other reason prohibited by law in provision of employment opportunities and benefits. We are also committed to providing reasonable accommodations for qualified individuals with disabilities.