Nominal is a venture-backed company with offices in Washington DC, Los Angeles, Austin, and New York City. We’re focused on building software and data solutions for organizations that test and validate complex systems—think drones, rocket engines, satellites, and nuclear reactors. Supported by leading investors like General Catalyst, Founders Fund, Lux Capital, and more, we’re gaining strong traction in the commercial and government aerospace and defense industrial base, including direct work with the U.S. Department of Defense (DoD).

Our team includes engineers and operators from SpaceX, Palantir, Anduril, Lockheed Martin, and NASA, all working toward a common goal: making it faster and easier for hardware engineers to push the boundaries of advanced technology safely and efficiently. Our platform helps engineering teams accelerate test data review and analysis, scaling testing campaigns to save time and cut costs.

Nominal’s defense and commercial customers operate in some of the most sensitive data environments in the country. We built the Nominal platform to protect the sensitivity of this data and to prioritize its security above all else. Our internal systems must meet a commensurate standard of security.

As our first technical hire fully dedicated to information security (infosec) and governance, risk, and compliance (GRC), you’ll be responsible for developing and maturing various infosec and GRC controls, and authority to operate (ATO) initiatives, to meet the high bar described above. This includes hardening Nominal’s software platform (both security and availability/reliability), deploying into secure environments, assisting with incident response, managing Nominal’s network, ensuring endpoint security, establishing baseline device configuration, guaranteeing technical compliance with information security standards, and more.