Mach Industries
Security Engineer
- Location
- Huntington Beach, California, United States, United States
- Salary
- USD 105,000 – 150,000 / year
- Posted
- (1 hour ago)
About the role
About Mach Industries
Founded in 2023, Mach Industries is a rapidly growing defense technology company focused on developing next-generation autonomous defense platforms. At the core of our mission is the commitment to delivering scalable, decentralized defense systems that enhance the strategic capabilities of the United States and its allies. With a workforce of approximately 350 employees, we operate with startup agility and ambition.
Our vision is to redefine the future of warfare through cutting-edge manufacturing, innovation at speed, and unwavering focus on national security. We are dedicated to solving the next generation of warfare with lethal systems that deter kinetic conflict and protect global security.
The Role
Join a small security engineering team at a fast-moving defense manufacturer, building infrastructure security automation that supports IT and Security teams.
You will work directly with the team lead, initially receiving mentorship and guidance on security automation. As you develop your skills, you will take on increasing responsibility, independently delivering automation solutions and owning larger projects.
Over time, you will expand your work into Governance, Risk and Compliance (GRC) as code and support security reviews of new software, vendors, cloud services and internal projects. By the end of your first year, you will be expected to take ownership of automation projects and contribute to broader security risk assessments.
Key Responsibilities
-
Build and maintain infrastructure security automations that support the daily operations of IT and Security teams.
-
Develop automation using standard interfaces, including APIs and command-line interfaces (CLIs), to enable integrations across security, cloud and IT platforms.
-
Build, maintain and improve integrations between security, cloud and IT tools.
-
Expand infrastructure security automation capabilities into Governance, Risk and Compliance (GRC) as code.
-
Review cloud and SaaS configurations against established security requirements and identify potential security gaps.
-
Document technical findings, decisions, processes and runbooks clearly so other teams can understand and act on recommendations.
-
Collaborate with IT, Security, Compliance and Engineering teams to identify, communicate and resolve security issues.
-
Support security reviews of new software, vendors, cloud services and internal projects by gathering relevant information, assessing risk and recommending whether to approve, modify or escalate.
-
Take increasing ownership of automation projects, from initial request and development through implementation, rollout and ongoing maintenance.
Required Qualifications
-
1–3 years of experience in security engineering, security operations, cloud security or a closely related field. Relevant military service and internships will also be considered.
-
Hands-on experience with AWS, Microsoft 365/Azure or another major cloud platform.
-
Demonstrated experience automating security or IT processes using scripting or automation tools.
-
Working knowledge of Git and version control practices.
-
Understanding of core security fundamentals, including:
-
Identity and access management (IAM).
-
Network security.
-
Security logging and monitoring.
-
Vulnerability management.
-
Security risk assessment.
-
-
Strong written communication skills, with the ability to clearly explain security risks and recommendations to non-security stakeholders.
-
Ability to learn quickly, accept feedback, work collaboratively and follow projects through to completion.
-
Eligibility to obtain a U.S. Secret security clearance.
-
Must meet applicable ITAR (International Traffic in Arms Regulations) requirements.
Preferred Qualifications
-
Experience in the defense industry, including work with defense contractors, military service or government programs.
-
Programming and automation experience with Python.
-
Experience with Ansible and infrastructure automation.
-
Familiarity with security monitoring and endpoint security platforms, including:
-
Datadog.
-
CrowdStrike.
-
Jamf.
-
NinjaOne.
-
CyberArk.
-
-
Experience with Microsoft GCC High environments.
-
Experience working with AWS commercial and AWS GovCloud environments.
-
Experience conducting vendor risk assessments, software security reviews or architecture security reviews.
-
Background in security operations or detection engineering.
-
Familiarity with NIST SP 800-171 and/or CMMC compliance requirements.
-
Experience with infrastructure-as-code tools such as Terraform and container technologies.
-
Experience with vulnerability management platforms such as Tenable or similar tools.
-
Relevant security or cloud certifications, such as CompTIA Security+, AWS Associate certifications or Microsoft Associate certifications.
Additional Requirements
- Available to work extended hours and weekends as needed.
ITAR Requirements
To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here.
At Mach, we believe that compensation is more than just a paycheck. It's a comprehensive package designed to reward the time, skills, and expertise you bring to our team. We are committed to offering competitive compensation that is equitable, transparent, and aligned with market trends.
Key Elements of Our Compensation Philosophy:
- Competitive Salaries: We continuously research market rates to ensure our salaries are competitive with those in our industry and geographic location.
- Performance-Based Incentives: Our bonus structure is tied to both individual and company performance, creating a win-win scenario that motivates our team members to excel.
- Equity Participation: We offer stock options or equity to employees, ensuring that you share in the success and growth of the company.
- Benefit Packages: Our benefits include healthcare, dental and vision plans, retirement savings, and paid time off, because we understand that your well-being extends beyond the office.
- Professional Development: We allocate funds for continuing education, training, and career growth.
- Transparency: We are committed to openness about our compensation tiers and how decisions are made, ensuring trust and mutual respect.
By joining Mach, you’re not just accepting a job—you’re becoming a key part of a team that values your contributions and invests in your growth. Together, we aim to create a rewarding environment that sets the stage for long-term success.
Data Privacy
To view Mach Industries candidate data privacy policy, please visit https://machindustries.com/privacy-policy.
Disclosures
This position may require access to information protected under U.S. export control laws and regulations, including the Export Administration Regulations (EAR) and the International Traffic in Arms Regulations (ITAR). Please note that any offer for employment may be conditioned on authorization to receive software or technology controlled under these U.S. export control laws and regulations without sponsorship for an export license.
Mach participates in E-Verify and will provide the federal government with your Form I-9 information to confirm that you are authorized to work in the U.S.
The salary range for this role is an estimate based on a wide range of compensation factors, inclusive of base salary only. Actual salary offers may vary based on (but not limited to) work experience, education and training, critical skills, and business considerations. Highly competitive equity grants are included in most offers and are considered part of Mach’s total compensation package. Mach offers benefits such as health insurance, retirement plans, and opportunities for professional development.
Mach is an equal opportunity employer committed to creating a diverse and inclusive workplace. All qualified applicants will be treated with respect and receive equal consideration for employment without regard to race, color, creed, religion, sex, gender identity, sexual orientation, national origin, disability, uniform service, Veteran status, age, or any other protected characteristic per federal, state, or local law, including those with a criminal history, in a manner consistent with the requirements of applicable state and local laws. If you’d like to defend the American way of life, please reach out!