Platform Trust & Security Lead; Satellite​/Firmware Security

Location

Mountain View or San Diego

Full time

On-site

Engineering

• $190K – $270K

Logos Space is a Low Earth Orbit (LEO) satellite system purpose-built to serve the connectivity needs of the commercial enterprise users and government users. We will help fill an important gap in the market, providing resilient, high-performance satellite-based connectivity services to enterprise and government customers worldwide. Business customers have contracts with agreed-upon performance standards for their broadband, and Logos will build these capabilities into the system from the beginning.

Speed and reliability are the foundation of the system. Logos is designed to extend cloud and data center network connectivity anywhere in the world to fixed, seaborne, and airborne terminals.

Logos is led by a team of highly experienced engineers with proven track records in the networking and satellite industries.

About Logos Space Engineering

The Product and Data Link Security team at Logos Space engineering is responsible for ensuring the success of our network by providing unique levels of security and authentication in space communications. The framework for this is inherent in the concept of a Layer 2, 2.5, and 3 service that can support isolated flows and end-to-end encryption. This position is a critical driver of the architecture, overseeing extensive development efforts specific to the security architecture, as well as working with other teams like the ground segment and spacecraft systems.

We are seeking engineers who can thrive in a fast-moving environment, comfortable taking vague design ideas and turning them into concrete, testable architecture and secure solutions.

The Role

The Platform Trust & Security Lead will lead the security architecture for satellite onboard systems (bus + payload compute). You will be responsible for designing secure boot chains, attestation mechanisms, and enforcing trust boundaries across all onboard components. This role requires close collaboration with hardware, firmware, and system teams to ensure end-to-end platform integrity.

Key Responsibilities

• Security Strategy and Architecture:
  Develop and maintain a comprehensive security strategy, architecture, and roadmap tailored to the specific challenges of satellite and firmware security.
• Platform Trust Design:
  Lead the design and implementation of a robust secure boot and chain of trust architecture for all satellite onboard systems.
• Security Controls Implementation:
  Drive the design, implementation, and management of platform-specific security controls, including:
  • Defining requirements for Hardware Root of Trust (TPM, secure elements, eFuse)
  • Implementing and managing firmware signing and attestation processes
  • Developing access control mechanisms for onboard software and low-level interfaces.
• Threat Modeling and Risk Assessment:
  Conduct thorough threat modeling and risk assessments to identify vulnerabilities and potential attack vectors across satellite firmware and low-level embedded systems.
• Incident Response:
  Develop and maintain incident response plans and procedures specific to onboard system compromise, and lead and coordinate security incident response activities.
• Collaboration and Communication:
  Work closely with hardware, firmware (C/C++, Rust preferred exposure), and systems teams to embed security best practices throughout the platform development lifecycle.
• Team Growth and Leadership:
  Actively grow the Logos security team by recruiting top-tier talent and providing technical guidance and mentorship to contribute to the overall security organization growth.

Basic Qualifications:

• Bachelor's degree in Computer Science, Cybersecurity, or a related field (Master's degree preferred).
• Minimum of 7-10 years of experience in network security engineering, with demonstrable experience in designing and implementing security solutions for complex network environments.
• Strong knowledge of security principles, best practices, and frameworks (e.g. Zero Trust, defense-in-depth).
• Excellent analytical, problem-solving, and low-level debugging…