Cloud Application Security Engineer

About Skylo

Skylo is a global Non-Terrestrial Network service provider based in Mountain View, CA, offering a service that allows smartphone and IoT cellular devices to connect directly over existing satellites. 

Skylo’s direct-to-device service is now live across four continents, with more than 50 million square kilometers of coverage, in partnership with multiple satellite operators, mobile network operators (MNOs), Tier-1 chipset makers, and OEMs. Devices connected over satellite are managed and served by Skylo's commercial NTN vRAN, featuring a 3GPP standards-based cloud-native base station and core. Skylo provides anywhere, anytime connectivity solution that seamlessly roams between terrestrial and satellite networks. Our focus is on enabling connected services for people outdoors and connected workflows across three main verticals: mass-market consumer devices, automotive, and industrial IoT.

This role is located in Bangalore, India where we are onsite 3 days a week in the office. 

Summary Of How You Will Impact Skylo

Skylo is hiring a Cloud Application Security Engineer to help fulfill Skylo’s mission of making satellite connectivity available to all. This individual will ensure comprehensive security around development and maintenance of technology assets and partnerships for a next generation Satellite IoT service.

How You Will Contribute

• Cloud Security Review: Conduct regular assessments and reviews of cloud deployments to identify security vulnerabilities, misconfigurations, and compliance gaps.
• Security Testing: Conduct security testing of web applications, APIs, container and mobile applications using a variety of tools and techniques, including static analysis, dynamic analysis, and penetration testing.
• Security Improvement Initiatives: Develop and implement strategies to continuously improve the security of cloud deployments, including enhancing security controls, implementing automation, and optimizing security configurations.
• DevSecOps Implementation: Lead the adoption of DevSecOps practices in cloud environments by integrating security into the software development lifecycle, including design, development, testing, deployment, and operations.
• Security Automation: Develop and maintain security automation scripts, tools, and pipelines to automate security tasks, such as vulnerability scanning, compliance checks, and security testing.
• Vulnerability Management: Identify and prioritize security vulnerabilities discovered during security testing and collaborate with development teams to ensure timely remediation.
• Security Incident Response: Develop and maintain incident response procedures for cloud environments, including monitoring, detection, investigation, and remediation of security incidents.
• Collaboration: Work closely with development teams, DevOps engineers, architects, and other stakeholders to ensure that security is integrated into all aspects of cloud deployments and operations.
• Documentation: Maintain accurate documentation of security policies, procedures, configurations, and incidents related to cloud deployments.

What We Look For

• 6 to 8 years of proven experience in security domain or similar role
• Strong understanding of cloud architecture and security principles, with experience in Google Cloud Platform, AWS, or Azure.
• Hands-on experience with DevSecOps tools and practices, such as infrastructure as code (IaC), continuous integration/continuous deployment (CI/CD), and security automation.
• Proficiency in scripting and programming languages, such as Python, PowerShell, or Bash.
• Strong understanding of web application security principles, common vulnerabilities, and attack vectors, such as OWASP Top 10 and SANS 25.
• Experience with security testing tools such as Burp Suite, OWASP ZAP, Veracode, or similar tools.
• Excellent communication and collaboration skills, with the ability to work effectively with cross-functional teams.
• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field. Advanced degrees and industry certifications, such as CISSP, CEH or OSCP are a plus.

What We Offer

With employees working across three continents, Skylo is proud to be an equal opportunity employer dedicated to building an inclusive and diverse workforce. Our worldwide and inclusive culture encourages a flexible approach to work, and we also offer an attractive range benefits such as: 

• Competitive compensation packages including a stock option based equity program 
• Comprehensive benefits including medical, dental, vision, retirement plan
• Monthly allowances for wellness and education reimbursement
• A generous time off policy, holidays, and the opportunity to temporarily work abroad
• Once in a lifetime opportunity to be a part of developing and running world’s first commercial, live direct-to-device satellite network and service 
• Access to world-class team and talent across tech domains: software, hardware, chipsets, telecom, satellite and network virtualization 
• Open, transparent, inclusive culture that blends the Silicon Valley, Nordic and South Asia characteristics

EEO Statement
Skylo is an equal-opportunity employer and we celebrate diversity. We do not discriminate on the basis of race, religion, color, ancestry, national origin, caste, sex, sexual orientation, parent or caregiver status, political affiliation, gender, gender identity or expression, age, disability, medical condition, pregnancy, genetic makeup, marital status, or military service consistent with applicable federal, state, and local laws.

We are also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. Please let us know if you need assistance or accommodation due to a disability.