Staff Offensive Security Engineer at Vast

At Vast, our mission is to contribute to a future where billions of people are living and thriving in space. Vast is developing next-generation space stations to ensure a continuous human presence in space for America and its allies, enabling advanced microgravity research and manufacturing, and unlocking a new space economy for government, corporate, and private customers. Using an incremental, hardware-rich and low-cost approach, Vast is rapidly developing its multi-module Haven Station. Haven Demo’s 2025 success made Vast the only operational commercial space station company to fly and operate its own spacecraft. Next, Haven-1 is expected to become the world’s first commercial space station when it launches, followed by additional Haven modules to enable permanent human presence by 2030. Our team is all-in, committed to executing our mission safely and on time. If you want to work with the most talented people on Earth furthering space exploration for humanity, come join us. Vast is looking for a Staff Offensive Security Engineer, reporting to the Information Security Manager, to support the development of the systems that will be required for the design and build of artificial-gravity human-rated space stations. This person will build out the team’s offensive security capabilities and support various teams to build cyber resilient applications and systems. This will be a full-time, exempt position located in our Long Beach location. Responsibilities: • Stand up and scale Vast’s red team capability from inception, defining strategy, engagement models, tradecraft, and operational processes while executing adversary emulation across mission and corporate environments. • Lead security research and assess the cyber resilience of Vast’s systems, applications, and mission-critical products, identifying systemic risks before adversaries do. • Architect and develop advanced adversary simulation tooling and methodologies to challenge security architecture, design decisions, and implementation controls. • Partner closely with engineering, infrastructure, and security teams to drive remediation, influence secure design decisions, and strengthen long-term defensive maturity. Minimum Qualifications: • 5+ years of hands-on experience in security research, penetration testing, or adversarial security engineering. • Deep understanding of various operating systems, identity systems, and network protocols, with demonstrated experience identifying and exploiting weaknesses in complex enterprise or mission-critical infrastructure. • Proficiency in one or more programming languages (e.g., Python, Golang, Rust, C/C++). • Experience with security research tools and frameworks (e.g., Kali Linux, Burp Suite, Metasploit, etc.). • Experience assessing and exploiting AWS environments and cloud-native architectures. • Demonstrated ability to apply AI or machine learning concepts to augment red team capabilities in complex systems. Preferred Skills & Experience: • Advanced technical certifications such as OSCP, OSEP, CRTO, CPTS, or equivalent demonstrable offensive security expertise. • Experience designing agentic security automation or applied AI to enhance adversary simulation. • Prior experience conducting offensive security assessments against space, aerospace, satellite, avionics, or other safety-critical systems. • Working knowledge of compliance frameworks such as NIST 800-171, CMMC 2.0, DFARS 252.204-7012, ITAR, and EAR, and the ability to operate effectively within regulated environments. • Experience building or maturing offensive security capabilities within a fast-paced startup or high-growth environment. Additional Requirements: • Ability to travel up to 10% of the time • Willingness to work overtime, or weekends to support critical mission milestones Pay Range: • Senior Offensive Security Engineer: $143,500 - $203,700 • Staff Offensive Security Engineer: $158,100 - $226,900 Pay Range: California$143,500—$226,900 USDCOMPENSATION AND BENEFITS Base salary will vary depending on job-related knowledge, education, skills, experience, business needs, and market demand. Salary is just one component of our comprehensive compensation package. Full-time employees also receive company equity, as well as access to a full suite of compelling benefits and perks, including: 100% medical, dental, and vision coverage for employees and dependents, generous paid time off; up to 20+ days of vacation for exempt staff and up to 10+ days of vacation for non-exempt staff with the ability to cash-out unused vacation annually, paid parental leave, short and long-term disability insurance, life insurance, access to a 401(k) retirement plan, ClassPass credits, personalized mental healthcare through Spring Health, and other discounts and perks. We also take pride in offering exceptional food perks, with snacks, drip coffee & onsite barista, cold drinks, and dinner meals remaining free of charge, and lunch subsidized as part of Vast’s ongoing commitment to providing high-quality meals for employees. U.S. EXPORT CONTROL COMPLIANCE STATUS The person hired will have access to information and items subject to U.S. export controls, and therefore, must either be a “U.S. person” as defined by 22 C.F.R. § 120.62 or otherwise eligible for deemed export licensing. This status includes U.S. citizens, U.S. nationals, lawful permanent residents (green card holders), and asylees and refugees with such status granted, not pending. EQUAL OPPORTUNITY Vast is an Equal Opportunity Employer; employment with Vast is governed on the basis of merit, competence and qualifications and will not be influenced in any manner by race, color, religion, gender, national origin/ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability or any other legally protected status.