Product Security Manager

About Northwood:

Northwood is a modern space infrastructure company bringing the benefits of space to the masses through advanced communications technology. We are building a global network of phased array ground stations that enable real-time, reliable communication for satellite missions such as national security, global connectivity, and disaster response. With a vertically integrated approach, Northwood designs, builds, and rapidly deploys scalable systems that power the next generation of space missions. If you like solving complex challenges and seeing your work deployed around the world with real impact, Northwood is the place to do it.

Role

As Product Security Lead, you will own the security of Northwood's software and systems from design through deployment. This is a senior technical leadership role for an engineer with deep expertise across the full product security lifecycle — from threat modeling and secure architecture review to penetration testing, vulnerability management, and the cryptographic foundations that protect mission-critical space communications.

You will embed security into every stage of our software development lifecycle, build and mature our application security program, and ensure that the products Northwood delivers to government and commercial customers meet the most demanding security requirements in the industry. This role partners closely with product and infrastructure engineering teams and reports to the Head of Security.

Responsibilities

Application Security & SDLC

• Own application security across the full software development lifecycle, ensuring security requirements are defined, validated, and enforced from design through production release.

• Conduct security architecture reviews and threat modeling for new product features, platform changes, and third-party integrations.

• Establish and maintain secure coding standards, security review gates, and developer security training programs.

• Serve as the primary security liaison for product engineering teams, translating compliance and security requirements into actionable engineering guidance.

SAST, DAST & Vulnerability Management

• Deploy, manage, and continuously improve static application security testing (SAST) and dynamic application security testing (DAST) tooling integrated into development workflows.

• Own the vulnerability management program end-to-end: discovery, triage, prioritization, remediation tracking, and reporting across product and infrastructure systems.