Lead, Product and Data Link Security

Overview

Logos Space is a Low Earth Orbit (LEO) satellite system purpose-built to serve the connectivity needs of commercial enterprise users and government users. Logos provides resilient, high-performance satellite-based connectivity worldwide and extends cloud and data center network connectivity to fixed, seaborne, and airborne terminals. Logos is led by a team of experienced engineers in networking and satellite industries.

The Network Engineering team at Logos Space is responsible for ensuring the success of our network by providing security and authentication in space communications. The framework supports Layer 2, 2.5, and 3 services with end-to-end or customer-provided encryption, isolated flows, and point-to-point delivery that never uses shared infrastructures. You will develop an integrated security architecture across the payload, bus, ground segment and Software Defined Network segments, manage its implementation, and collaborate with other teams to ensure full deployment.

Once deployed, the security architecture will address emergent threats and evolve to meet new ones. This role is a driver of architecture and will oversee extensive development efforts related to the security architecture and other development efforts (ground segment and spacecraft systems).

You should be prepared to work in a fast-moving environment where you turn vague design ideas into hardware ready for test and flight. We are seeking engineers who love solving hard problems.

• Security Strategy and Architecture:
  Develop and maintain a comprehensive security strategy, architecture, and roadmap for a hybrid space and terrestrial network across all layers. Focus areas include:
• Develop technical requirements for confidentiality and authentication throughout the Logos system, protecting customer traffic and Logos control over the network.
• Develop product security requirements to prevent cybersecurity attacks or denial. Update as the threat environment evolves.
• Develop policies, practices, and assurance of the security of the Logos supply chain, ensuring no vulnerabilities are introduced by any element of the supply chain.
• Threat Modeling and Risk Assessment:
  Conduct threat modeling and risk assessments across space, ground infrastructure, and interconnections.
• Security Controls Implementation:
  Lead the design, implementation, and management of security controls, including but not limited to:
• Network segmentation strategies
• Intrusion detection and prevention systems (IDS/IPS)
• Encryption technologies for data in transit and at rest, considering space-based link constraints
• Access control mechanisms, including multi-factor authentication (MFA) and role-based access control (RBAC)
• Security Information and Event Management (SIEM) system design and integration
• Vulnerability management programs, including regular scanning and remediation
• Incident Response:
  Develop and maintain incident response plans and procedures specific to the hybrid network environment; lead and coordinate security incident response activities.
• Security Monitoring and Analysis:
  Establish robust security monitoring capabilities to detect and analyze suspicious activity; develop custom alerts and dashboards for actionable insights.
• Compliance and Governance:
  Ensure adherence to relevant security standards and frameworks (e.g., NIST, ISO 27001) for terrestrial and potentially space-based operations.
• Collaboration and Communication:
  Collaborate with network engineering, systems engineering, and software development teams to integrate security best practices; communicate risks and recommendations to technical and non-technical stakeholders.
• Security Awareness and Training:
  Contribute to security awareness training programs tailored to the hybrid network environment.
• Technology Evaluation:
  Evaluate and recommend new security technologies and solutions relevant to the evolving threat landscape and the hybrid network requirements.
• Mentorship and Leadership:
  Build Logos software and access control teams; provide technical guidance and mentorship to security team members and contribute to the growth of the security organization and Logos overall.

• Bachelor's degree in Computer Science, Cybersecurity, or a related field (Master's degree preferred).
• Minimum of 7-10 years of experience in network security engineering, with demonstrable experience designing and implementing security solutions for complex network environments.
• In-depth understanding of networking protocols and technologies across Layers 2, 2.5 (MPLS, QinQ), and 3 (TCP/IP, routing, switching).
• Strong knowledge of security principles, best practices, and frameworks (e.g., Zero Trust, defense-in-depth).
• Experience with the implementation of network security technologies, intrusion detection/prevention systems, and endpoint security solutions.
• Understanding of encryption and authentication technologies and their application in network security.
• Excellent analytical,…