Security Engineer, Full Stack

Job description

HADRIAN - MANUFACTURING THE FUTURE Hadrian is building autonomous factories to reindustrialize America. By combining AI, advanced software, robotics, and full-stack manufacturing, we help aerospace and defense companies build rockets, satellites, aircraft, ships, and other mission-critical systems up to 10x faster and at significantly lower cost. Following our $1.37B Series D at a $7.87B valuation, Hadrian is rapidly expanding our manufacturing footprint, launching new capabilities across welding, casting, forging, electronics, additive manufacturing, and more, while scaling our Factory-as-a-Service platform to transform how critical products are built. Backed by leading investors including JPMorgan Chase, Valor Equity Partners, Andreessen Horowitz, Founders Fund, 137 Ventures, Lux Capital, T. Rowe Price, and Morgan Stanley, we’re building the future of American manufacturing—and looking for exceptional people to help make it happen. If you’re ready to take on the most challenging and rewarding work of your career while helping create American manufacturing jobs for generations to come, you’re exactly who we’re looking for. The Role: As a Security Engineer at Hadrian, you’ll shape the security of our platform as we expand to serve external customers and partners. You’ll drive the transition to Factory-as-a-Service, with identity, multi-tenancy, and data boundaries at the core. This is a full-stack role—spanning application code, cloud, Kubernetes, identity management, and cutting-edge operational technology on the factory floor. You’ll work with innovative systems, some being developed here for the first time, including manufacturing and OT environments that few security engineers have encountered. Join us as a founding member of a rapidly growing security team. Instead of inheriting legacy choices, you’ll establish the standards, best practices, and tools that will scale our security from the ground up. You’ll tackle challenges end-to-end—learning unfamiliar systems and designing solutions that make secure practices the default. If you’re curious, thrive in ambiguity, and want to chart new territory, this is your opportunity to make a lasting impact. What You’ll Do - Own security end-to-end across the whole stack — application code, cloud infrastructure (AWS/GCP), Kubernetes workloads, identity and authorization, and the factory-floor and operational-technology systems that produce real parts. - Scale security through automation. Build the agentic tooling and automation loops — AI-driven checks, paved-road patterns, self-enforcing guardrails — that let coverage grow with what you build rather than with headcount. - Dig into unfamiliar systems — new tech we're adopting and manufacturing systems few people understand — map how they actually work, identify where the real risk lies, and design controls that fit the way Hadrian builds. - Turn compliance into engineering. Build the practical foundations for CMMC 2.0 / NIST 800-171 and the ITAR boundary as controls that hold up under audit — not paperwork beside the system. - Respond when it matters. Investigate, contain, and drive incidents to resolution, then turn each one into a systemic fix and a better default. What We’re Looking For - Ship the fix, not just the finding. You write code (Go, Python, or similar) and solve problems by building the guardrails and tooling — SDKs, CLIs, CI/CD checks, and patterns — that make it easy to do the right thing and hard to do the wrong one, rather than filing a ticket for someone else. - 4+ years in security engineering, software engineering, or infrastructure/platform engineering, with real hands-on security ownership somewhere in there. - Fluency with agentic systems. Familiarity with agentic loops and task delegation — building with or on LLM agents and automation - You move fast and learn faster. You take an under-specified mission, decide where to start, make sound calls under uncertainty, and ramp on something unfamiliar quickly - You weigh risk against innovation — and say so. You make the risk-aversion versus innovation trade-off explicit on real decisions, so the business chooses deliberately rather than defaulting to "no." - A track record of deleting controls or process — retiring the checks that shouldn't exist and proving the automated replacement held. - Genuine breadth and curiosity. You move between application security, cloud and Kubernetes security, identity/authorization, and networking — and you actively want to understand how a new layer works, down to the details. What Will Set You Apart - GCC High administration or migration experience - Security experience in manufacturing or OT environments - Familiarity with ITAR/EAR and CUI marking and handling requirements - Ability to mentor and grow a team. As security scales here, you can set technical direction and level up the engineers who join around you. Compensation For this role, the target salary ra