ABOUT GALLATIN
At Gallatin, we are rebuilding logistics infrastructure for the national security missions of the United States and allied partners. We build AI systems that determine how logistics decisions are made - not just how they're executed. From factory to foxhole, we operate at the layer where data becomes decisions, and decisions make the advantage.
ABOUT THE ROLE
We're looking for a Platform Security Engineer to protect Gallatin, our platform, and our customers as our profile in defense technology grows. You'll own security across the platform: keeping sensitive data inside our boundary as engineers use AI, defending against capable adversaries, isolating every customer's data, and building zero trust and continuous monitoring into everything we ship.
This is a hands-on engineering seat. You'll meet FedRAMP and CMMC by building secure-by-default systems and automated controls, not by managing checklists. You'll work closely with engineering, product, IT, and leadership, and you'll shape how our security function grows.
WHAT YOU'LL DO
KEEP AI USE INSIDE OUR BOUNDARY
- Own the controls that keep prompts, source code, and technical data from being sent to or retained by third-party model providers, using approved-tool policies, egress filtering, DLP, and prompt inspection.
- Stand up and secure self-hosted or government-cloud AI options so engineers get the benefits of AI without leaving our controlled environment.
- Partner with legal and export control so AI use respects ITAR, EAR, and CUI handling requirements.
BUILD A ZERO TRUST PLATFORM WITH ISOLATION BY DEFAULT
- Drive zero trust across identity, devices, networks, and workloads: strong authentication, least privilege, continuous verification, and microsegmentation.
- Embed security in the developer workflow with secure baselines, policy as code, secrets management, hardened CI/CD, and supply chain integrity (SBOMs, signed artifacts). Make the secure path the easy path.
- Design and continuously test tenant isolation across identity, network, storage, encryption, and logging, including patterns for customers with different classification levels and per-tenant encryption keys where needed. Treat any cross-tenant exposure as top severity.
DEFEND, DETECT, AND RESPOND
- Build threat models for a defense company with a rising public profile, covering nation-state actors, supply chain attacks, social engineering, and insider risk.
- Build security observability across cloud, endpoints, identity, and applications, and own the path from alert to triage to response.
- Lead incident response planning, run tabletop exercises with engineering and leadership, and turn defense-sector threat intelligence into concrete improvements.
TURN COMPLIANCE INTO ENGINEERING
- Implement and mature controls aligned with NIST SP 800-171, CMMC, FedRAMP (NIST SP 800-53), and DoD Impact Levels (IL4/IL5).
- Automate evidence collection so continuous monitoring keeps us audit-ready, and support assessments and authorizations alongside our GRC team.
WHAT WE’RE LOOKING FOR
- Active U.S. government Secret clearance, with the ability to maintain it and be upgraded as mission needs require. U.S. citizenship required.
- 5+ years in security engineering, with hands-on depth in cloud, platform, or infrastructure security.
- Experience implementing zero trust in production, including identity, least privilege, and network segmentation.
- Experience designing or securing multi-tenant systems and enforcing data isolation between customers.
- Experience building security monitoring and detection: log pipelines, SIEM, alerting, and incident response.
- Working knowledge of NIST SP 800-171, CMMC, and FedRAMP, and how to meet them through engineering.
- Understanding of AI and LLM data risks, such as data leakage, prompt injection, and model provider retention, and how to mitigate them.
- Proficiency in Python, Go, Terraform, or similar for automating controls.
BONUS POINTS
- Active Top Secret clearance; SCI eligibility or a current polygraph.
- Experience with AWS GovCloud, Azure Government, or DoD IL4/IL5/IL6 environments.
- Experience deploying or securing self-hosted LLMs or AI gateways.
- Background in detection engineering, red teaming, or insider threat programs.
- Certifications such as CISSP, CCSP, OSCP, or CMMC-related credentials.
- You've built a security function from early stage, in a setting with few established playbooks.
MISSION AND IDENTITY
We are building the system that enables faster, smarter logistics decisions in contested environments, and we're doing it with a team of seasoned entrepreneurs, operators, and technologists who have built and scaled solutions in this space before. We hold ourselves to an extremely high standard. We value clear thinking, direct communication, and the kind of ownership that doesn't stop until something actually works.
Our mission is to create decision advantage when the stakes are the highest. If we succeed, the system doesn't just run; it gets smarter. We're not building AI for its own sake. We're building it because faster, smarter decisions in the most demanding environments on earth can't wait. If you want to work somewhere the stakes are real and the mission is urgent - you'll fit in here.
WHY GALLATIN?
The logistics infrastructure that supports America's warfighters and humanitarian disaster responders is overdue for transformation, and we are building it. From defense operations to disaster response, we're solving the hardest problems that keep missions moving when it matters most. Join a team where the mission is the point.
Compensation: Gallatin offers competitive compensation commensurate with experience. Actual compensation may vary based on experience, skills, and location. In addition to base salary, we offer a generous equity grant, full healthcare coverage, 401k, unlimited PTO, and the perks of working in a high-caliber, mission-driven environment.
Gallatin is an equal opportunity employer. We do not discriminate on the basis of race, color, religion, sex, national origin, age, disability, veteran status, sexual orientation, gender identity, or any other characteristic protected by applicable federal, state, or local law.
This position may require the ability to obtain and maintain a U.S. government security clearance. The successful candidate must be able to work in a classified environment when necessary.
We comply with the United States Department of Labor's Pay Transparency provision https://www.dol.gov/sites/dolgov/files/ofccp/pdf/pay-transp_English_unformattedESQA508c.pdf.
Note: Due to the nature of certain government contracts held by this organization, U.S. citizenship is a requirement for all positions at Gallatin. Proof of citizenship will be required prior to employment if selected.