Staff Software Engineer - Security

Skydio is the leading US drone company and the world leader in autonomous flight, the key technology for the future of drones and aerial mobility. The Skydio team combines deep expertise in artificial intelligence, best-in-class hardware and software product development, operational excellence, and customer obsession to empower a broader, more diverse audience of drone users, from utility inspectors to first responders, soldiers in battlefield scenarios, and beyond. About the Role: As a Staff Software Engineer - Security at Skydio, you will partner closely with security engineers and cross-functional teams to design, review, and build systems that secure our multi-tenant cloud and corporate environments. You will split your time roughly evenly between architecture and hands-on engineering. On one side, you will review RFCs, shape system design, and advise on initiatives with meaningful security implications. On the other, you will build and harden internal security tooling end to end. You will play a key role in maturing the systems that protect Skydio’s commercial, government, and DoD customers. How you’ll make an impact: Review RFCs and partner with engineering teams on architectural decisions that have security implications Design and build internal security systems end to end, including roadmap areas such as web application firewalls and vulnerability risk management t [... source excerpt omitted ...] tion software components as opportunities for better resilience and protection are identified Partner with Compliance to translate FedRAMP, SOC 2, Texas RAMP, ISO 27001, and CJIS requirements into practical technical controls Improve how we monitor, prioritize, patch, and respond to vulnerabilities across our cloud footprint Contribute to authentication and identity systems across cloud and corporate environments, including SSO and SCIM implementations Participate in the security team’s on-call rotation What makes you a good fit: 7+ years of experience in cloud security, platform security, infrastructure security, or a related security-focused engineering role Strong experienc [... source excerpt omitted ...] rolled information, including information subject to the International Traffic in Arms Regulations (ITAR), Export Administration Regulations (EAR), and/or U.S. government contract requirements. Candidates must be eligible to access such information without additional U.S. government authorization, unless the company determines that any required authorization can be obtained. Nice to have: Experience working in FedRAMP, SOC 2, ISO 27001, Texas RAMP, or CJIS-aligned environments Experience building or deeply integrating authentication and identity systems, including SSO, SCIM, and front-door authentication Experience with Kubernetes debugging, operations, or automation Background