Product Security Engineer, UTM

About Wing:

Wing offers drone delivery as a safe, fast, and sustainable solution for last mile logistics. Consumer appetites for on-demand services are increasing, but current delivery methods are inefficient, costly, and contribute to road accidents and air pollution. Wing’s fleet of highly automated delivery drones can transport small packages directly from businesses to homes on-demand, in minutes. We design, build, and operate our aircraft, and offer drone delivery services on two continents. Our technology is designed to be easy to integrate into existing delivery and logistics networks, offering a scalable drone delivery solution for a broad range of businesses. Wing is a part of Google's parent company, Alphabet, and our mission is to create the preferred means of delivery for the planet. If you're ready to do the greatest work of your life, come join us.

About the Role:

Wing is looking for a Product Security Engineer - UTM to join our Cybersecurity team. This role is Hybrid or Remote, based remotely in the US. In this role, you'll be a key player in ensuring our Unmanned Traffic Management (UTM) products are built with security at their core. You'll work closely with engineering and product teams to embed secure-by-design principles throughout the entire development lifecycle, from initial concept to final release. This involves proactively identifying and mitigating risks, designing robust security architectures, and developing tools to automate and streamline our security processes. Your expertise will be crucial in building innovative, resilient, and trustworthy products that meet all regulatory and compliance standards.

What You’ll Do:

• Conduct security reviews of new product features and designs to identify and address potential vulnerabilities early in development.
• Perform threat modeling to understand and mitigate risks associated with our UTM products.
• Collaborate with product and engineering teams to embed security requirements and best practices into their workflows.
• Automate security checks and processes within the continuous integration/continuous deployment (CI/CD) pipeline.
• Provide and maintain security controls that product teams can use to comply with standards like ISO 27001, IRAP, and NIST 800-53.
• Provide security training and guidance to developer teams to foster a strong security-first culture.

What You’ll Need:

• 8+ years of experience in Product Security or Security Assessment roles.
• Bachelor's degree in a Computer Science or equivalent practical experience.
• Experience in all aspects of design and implementation of security controls at the application and cloud infrastructure levels.
• Hands-on experience executing technical security assessments against web and mobile application stacks plus cloud infrastructure.
• Proven track record translating Regulatory & Compliance requirements into technical specifications for Engineering teams. Aviation Regulations preferred.