Security Engineer

Skydio is the leading US drone company and the world leader in autonomous flight, the key technology for the future of drones and aerial mobility. The Skydio team combines deep expertise in artificial intelligence, best-in-class hardware and software product development, operational excellence, and customer obsession to empower a broader, more diverse audience of drone users, from utility inspectors to first responders, soldiers in battlefield scenarios, and beyond.

As a Security Engineer on Skydio's Security team, you'll build the automation and internal tooling that keep our multi-tenant cloud and corporate environments secure and audit-ready. You'll write code that operates security controls, integrates identity and cloud systems, SCIM provisioning, vulnerability scanning, automated evidence collection and replaces manual, time-intensive processes with reliable engineering.

You'll start with high-impact automation work such as making security and compliance controls run, report, and self-remediate without manual effort and grow into broader security engineering across the team over time, from system design and architecture to hardening our production security capabilities.

If you're an engineer who wants to solve real security and automation problems end to end, this role gives you the room to build.

• Design and build automation that operates and enforces security controls by integrating cloud, infrastructure, and identity systems so controls run, and where possible self-remediate, without manual intervention
• Build tooling and integrations across cloud APIs, identity providers (e.g., SCIM provisioning), vulnerability scanners, and ticketing systems into a coherent, automated system
• Automate how we collect, validate, and report compliance evidence continuously across our cloud and corporate environments
• Build dashboards and pipelines that give real-time visibility into control status, gaps, and audit readiness
• As part of Security and GRC, translate framework requirements into practical, testable, code-driven controls
• Improve how we monitor, prioritize, patch, and respond to vulnerabilities across our cloud footprint
• Over time, design and build internal security systems end to end (e.g., vulnerability risk management, web application firewalls), review RFCs, and partner with engineering teams on architecturally significant, security-relevant decisions
• Participate in the security team's on-call rotation

• 3+ years of experience in a software, security, infrastructure, or platform engineering role
• Strong coding ability, with experience building and maintaining tooling in languages such as Python or Go
• Experience automating workflows and integrating systems via APIs
• Working knowledge of cloud environments (ideally AWS), including how security and identity controls are implemented
• Interest in engineering solutions to security and compliance problems rather than managing them manually
• Comfort operating across both design and hands‑on implementation, with an eagerness to grow into broader security engineering work over time
• This position requires access to export‑controlled technology, technical data, and/or controlled information, including information subject to the International Traffic in Arms Regulations (ITAR), Export Administration Regulations (EAR), and/or U.S. government contract requirements. Candidates must be eligible to access such information without additional U.S. government authorization, unless the company determines that any required authorization can be obtained.

• Experience building or automating tooling for security platforms (SIEM, IAM/IdP, vulnerability management, EDR, and cloud security tools)
• Experience with compliance automation or GRC tooling (e.g., evidence collection, continuous control monitoring)
• Experience working in or automating for FedRAMP, SOC 2, ISO 27001, Texas RAMP, or CJIS‑aligned environments
• Experience with Kubernetes debugging, operations, or automation
• Background supporting government, defense, or other highly regulated customers
• Obtaining FAA Part 107 certification within the first 60 days of…