About Beacon AI

We’re a fast-moving team of aviators, engineers, and operators building an AI platform to make flying safer, more efficient, and more capable. Backed by top investors, we’ve secured a dozen Department of Defense contracts and partnered with major airlines to deliver mission-critical systems. We operate without silos or heavy processes. Small, focused teams own what they build, ship quickly, and learn fast, pushing the boundaries of how humans and AI work together in aviation.

Role Overview

We are seeking a Senior Security Engineer to ensure the security and integrity of Beacon AI’s systems and data across commercial and Department of Defense (DoD) environments. This is a hands-on security engineering role focused on designing and operating secure systems, partnering closely with software teams, and protecting mission-critical flight safety technology while meeting applicable security and compliance standards, including FedRAMP and DoD Impact Level (IL) requirements.

What You’ll Do

• Design and implement secure architectures across applications, cloud infrastructure, backend services, and in-cockpit edge systems, including environments built to FedRAMP Moderate baseline and DoD IL4/IL5 environments.
• Protect sensitive data through strong controls for access management, encryption, and secure data handling, consistent with NIST 800-53 and NIST 800-171 requirements.
• Identify, assess, and mitigate security risks through vulnerability assessments, penetration testing, and security reviews.
• Lead incident response efforts, including detection, containment, remediation, and follow-up analysis.
• Integrate security into the SDLC by partnering with software teams on threat modeling, secure code review, and automated security checks in CI/CD and infrastructure-as-code.
• Implement and operate security monitoring and logging to detect and respond to threats in real time.
• Support authorization and compliance efforts (ATO packages, SSPs, POA&Ms) for FedRAMP and DoD accreditation processes.
• Help maintain CMMC 2.0 readiness and alignment with DFARS cybersecurity clauses across the environment.
• Secure our AI systems, including LLM and retrieval-based features, against risks like prompt injection, data leakage, and model misuse.

What Will Make You Successful

• 5+ years of hands-on experience in security engineering roles securing complex systems and data, including production cloud environments (AWS or AWS GovCloud strongly preferred)