Staff Software Engineer - Security

Skydio is the leading US drone company and the world leader in autonomous flight, the key technology for the future of drones and aerial mobility. The Skydio team combines deep expertise in artificial intelligence, best-in-class hardware and software product development, operational excellence, and customer obsession to empower a broader, more diverse audience of drone users, from utility inspectors https://www.skydio.com/solutions/energy-and-utilities to first responders https://www.skydio.com/solutions/public-safety, soldiers in battlefield scenarios https://www.skydio.com/solutions/national-security/tactical-isr, and beyond https://www.skydio.com/solutions. About the Role: As a Staff Software Engineer - Security at Skydio, you will partner closely with security engineers and cross-functional teams to design, review, and build systems that secure our multi-tenant cloud and corporate environments. You will split your time roughly evenly between architecture and hands-on engineering. On one side, you will review RFCs, shape system design, and advise on initiatives with meaningful security implications. On the other, you will build and harden internal security tooling end to end. You will play a key role in maturing the systems that protect Skydio’s commercial, government, and DoD customers. How you’ll make an impact: - Review RFCs and partner with engineering teams on architectural decisions that have security implications - Design and build internal security systems end to end, including roadmap areas such as web application firewalls and vulnerability risk management tooling - Harden and improve security-related production software components as opportunities for better resilience and protection are identified - Partner with Compliance to translate FedRAMP, SOC 2, Texas RAMP, ISO 27001, and CJIS requirements into practical technical controls - Improve how we monitor, prioritize, patch, and respond to vulnerabilities across our cloud footprint - Contribute to authentication and identity systems across cloud and corporate environments, including SSO and SCIM implementations - Participate in the security team’s on-call rotation What makes you a good fit: - 7+ years of experience in cloud security, platform security, infrastructure security, or a related security-focused engineering role - Strong experience working in AWS, ideally in multi-tenant cloud environments - Strong coding ability and comfort building and maintaining tooling in languages such as Python or Go - Experience reviewing system designs and RFCs and providing clear, actionable security guidance - Working knowledge of SIEM, vulnerability management, and related security tooling - Comfort operating across both technical design and hands-on implementation in a role that spans both strategy and execution - This position requires access to export-controlled technology, technical data, and/or controlled information, including information subject to the International Traffic in Arms Regulations (ITAR), Export Administration Regulations (EAR), and/or U.S. government contract requirements. Candidates must be eligible to access such information without additional U.S. government authorization, unless the company determines that any required authorization can be obtained. Nice to have: - Experience working in FedRAMP, SOC 2, ISO 27001, Texas RAMP, or CJIS-aligned environments - Experience building or deeply integrating authentication and identity systems, including SSO, SCIM, and front-door authentication - Experience with Kubernetes debugging, operations, or automation - Background supporting government, defense, or other highly regulated customers Compensation: - At Skydio, our compensation packages for regular, full-time employees include competitive base salaries, equity in the form of stock options, and comprehensive benefits packages. Compensation will vary based on factors, including skill level, proficiencies, transferable knowledge, and experience. Relocation assi