Software Engineer - Security

Department: R&D

Location: San Mateo, California, United States

Employment Type: FullTime

Skydio is the leading US drone company and the world leader in autonomous flight, the key technology for the future of drones and aerial mobility. The Skydio team combines deep expertise in artificial intelligence, best-in-class hardware and software product development, operational excellence, and customer obsession to empower a broader, more diverse audience of drone users, from utility inspectors to first responders, soldiers in battlefield scenarios, and beyond.

About the Role:

As a Software Engineer on Skydio's Security team, you'll build the automation and internal tooling that keep our multi-tenant cloud and corporate environments secure and audit-ready. You'll write code that operates security controls, integrates identity and cloud systems, SCIM provisioning, vulnerability scanning, automated evidence collection and replaces manual, time-intensive processes with reliable engineering.

You'll start with high-impact automation work such as making security and compliance controls run, report, and self-remediate without manual effort and grow into broader security engineering across the team over time, from system design and architecture to hardening our production security capabilities.

If you're an engineer who wants to solve real security and automation problems end to end, this role gives you the room to build.

How You’ll Make an Impact:

• Design and build automation that operates and enforces security controls by integrating cloud, infrastructure, and identity systems so controls run, and where possible self-remediate, without manual intervention

• Build tooling and integrations across cloud APIs, identity providers (e.g., SCIM provisioning), vulnerability scanners, and ticketing systems into a coherent, automated system

• Automate how we collect, validate, and report compliance evidence continuously across our cloud and corporate environments

• Build dashboards and pipelines that give real-time visibility into control status, gaps, and audit readiness

• As part of Security and GRC, translate framework requirements into practical, testable, code-driven controls

• Improve how we monitor, prioritize, patch, and respond to vulnerabilities across our cloud footprint

• Over time, design and build internal security systems end to end (e.g., vulnerability risk management, web application firewalls), review RFCs, and partner with engineering teams on architecturally significant, security-relevant decisions

• Participate in the security team's on-call rotation

What Makes You a Good Fit:

• 3+ years of experience in a software, security, infrastructure, or platform engineering role

• Strong coding ability, with experience building and maintaining tooling in languages such as Python or Go

• Experience automating workflows and integrating systems via APIs

• Working knowledge of cloud environments (ideally AWS), including how security and identity controls are implemented

• Interest in engineering solutions to security and compliance problems rather than managing them manually

• Comfort operating across both design and hands-on implementation, with an eagerness to grow into broader security engineering work over time

• This position requires access to export-controlled technology, technical data, and/or controlled information, including information subject to the International Traffic in Arms Regulations (ITAR), Export Administration Regulations (EAR), and/or U.S. government contract requirements. Candidates must be eligible to access such information without additional U.S. government authorization, unless the company determines that any required authorization can be obtained.

Nice to Have:

• Experience building or automating tooling for security platforms (SIEM, IAM/IdP, vulnerability management, EDR, and cloud security tools)

• Experience with compliance automation or GRC tooling (e.g., evidence collection, continuous control monitoring)

• Experience working in or automating for FedRAMP, SOC 2, ISO 27001, Texas RAMP, or CJIS-aligned environments

• Experience with Kubernetes debugging, operations, or automation

• Background supporting government, defense, or other highly regulated customers

• Obtaining FAA Part 107 certification within the first 60 days of employment is strongly encouraged for all Skydio employees and required for certain positions.

Compensation: At Skydio, our compensation packages for regular, full-time employees include competitive base salaries, equity in the form of stock options, and comprehensive benefits packages. Compensation will vary based on factors, including skill level, proficiencies, transferable knowledge, and experience. Relocation assistance may also be provided for eligible roles. The annual base salary range for this position is $160,000 - 210,000*. Fundamentally, we believe that equity is the key to long-term financial growth, and we ensure all regular, full-time employees have the opportunity to significantly benefit from the company's success. Regular, full-time employees are eligible to enroll in the Company’s group health insurance plans. Regular, full-time employees are eligible to receive the following benefits: Paid vacation time, sick leave, holiday pay and 401K savings plan. This position and all associated benefits are subject to applicable federal, state, and local laws, as well as the Company’s policies and eligibility criteria.

*Compensation for certain positions may vary based on the position’s location.

#LI-AS1

At Skydio we believe that diversity drives innovation. We have created a multidisciplinary environment that embraces the power of diverse perspectives to create elegant solutions for complex problems. We are committed to growing our network of people, programs, and resources to nurture an inclusive culture.

Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or other characteristics protected by federal, state or local anti-discrimination laws.

For positions located in the United States of America, Skydio, Inc. uses E-Verify to confirm employment eligibility. To learn more about E-Verify, including your rights and responsibilities, please visit https://www.e-verify.gov/