Six Roles, One Week
Material Security posted six senior roles, including five engineering and sales positions priced between $190,000 and $260,000, FIRST-PARTY BOARD DATA's figures put the range at, all remote-first, signaling a bet on email security as the primary wedge into enterprise accounts. The board splits between product engineering and go-to-market execution. On the engineering side, a Senior Manager for Email Security Engineering carries a $235,000–$260,000 band and owns the detection pipeline sitting in front of corporate inboxes. A Senior Software Engineer focused on Cloud Office Security, priced at $190,000–$235,000, works the integration layer connecting that pipeline to Microsoft 365 and Google Workspace tenants. A second senior slot, titled Sr. Software Engineer II and based in San Francisco, runs $213,512–$220,000 and appears scoped for core platform work.
| Role | Salary Band |
|---|---|
| Senior Manager, Email Security Engineering | $235,000–$260,000 |
| Senior Software Engineer, Cloud Office Security | $190,000–$235,000 |
| Sr. Software Engineer II (San Francisco) | $213,512–$220,000 |
| Mid-Market Account Executive | $200,000–$225,000 |
| Solutions Engineer | $200,000–$225,000 |
| Channel Sales Manager | $200,000–$225,000 |
The remaining three roles sit in revenue. A Mid-Market Account Executive and a Solutions Engineer, each banded $200,000–$225,000, target the 200–2,000 employee segment where email security buying decisions still happen in a single sales cycle. A Channel Sales Manager, also remote, rounds out the push toward partner-led distribution. The board's aggregated band clusters at a $225,000 median, FIRST-PARTY BOARD DATA's data shows, — consistent with a team pricing senior individual contributors and first-line managers in the same range.
None of the six listings mention threat analysis or compliance in their titles. The engineering roles center on email and cloud office vectors; the sales roles center on mid-market reach and channel leverage. If the organization is building a threat-analysis or compliance function, those requisitions either haven't been published or live under different titles. What the slate shows is a company doubling down on the email-security wedge while expanding the motions that close deals without a direct sales touch. The remote-first distribution, with five of six roles carrying no location requirement, signals the talent pool is national, not Bay Area-bound.
Three Forces Converge
Material Security's hiring push sits at the intersection of a threat landscape reshaped by generative AI, a competitive shakeout in email security, and a valuation giving the company runway to invest heavily in product. The startup was valued at $1.1 billion in a 2022 funding round, a figure that still anchors its recruiting pitch even as rival Sublime Security raised a fresh round led by IVP with participation from Citi Ventures, Decibel Partners, Index Ventures, and Slow Ventures. Sublime co-founder Ian Thiel told CNBC in December 2024 that "our mindset is we're going to go and spend a bunch of money on R&D still" — a signal the capital-intensive race to build AI-native detection is far from over.
The immediate catalyst is the explosion of AI-generated phishing. Generative AI has given attackers a way to automate crafting emails that crack corporate systems, removing the grammatical tells and template repetition legacy filters once caught. Sublime CEO Josh Kamdjou put it bluntly: attacks still penetrate Google and Microsoft defenses, even when companies pay for higher service tiers. "That's why we're seeing so much success, basically," Kamdjou said. "We're here to catch everything they don't." Brex, a business credit card issuer, had been using Material with Google inboxes but switched to Sublime after testing revealed "many problem emails that Material allowed but Sublime did not," said Brex CISO Mark Hillick. "All they need is one person to click on it, and then they go from there," Hillick said, referring to hackers. "That's why false negatives are pretty dangerous."
Incumbents feel the pressure. Proofpoint's year-over-year revenue growth has slipped to the teens after sitting in the thirties as recently as 2018. The company acquired AI startup Tessian last year; CEO Sumit Dhawan said in October 2024 that Proofpoint was 12 to 18 months away from going public again, though he noted acquisition prices remained high. Microsoft said last month its Defender for Office 365 now uses large language models for analysis and filtering. Gartner analyst Peter Firstbrook frames the challenge for legacy players as less about losing existing customers and more about missing new business from young companies that go with a next-generation tool such as Abnormal Security, which now exceeds $200 million in annualized revenue — considerably larger than both Material and Sublime.
No defense-contract wins or clearance-driven mandates appear behind Material's current openings; the drivers are commercial — AI-enabled attack volume, competitive displacement risk, and the need to close detection gaps customers like Brex have already flagged.
The Screen: What Passes
Material Security's six open roles signal a hiring push weighted toward product security engineering and customer-facing technical roles. The board's salary bands, clustering at a $225,000 median, place these positions squarely in the senior IC and engineering-lead tier. That compensation level alone filters for candidates who have shipped production security tooling, not just audited it.
Modern product security, defined as "security engineering from code to cloud or from code to product deployment," maps directly to the Cloud Office Security and Email Security Engineering titles. The same source describes the scope spanning "concept phase, design and development verification and then the maintenance phase" including "threat modeling, true code architecture design all the way to monitoring and detecting at runtime any threats." Candidates who clear Material's screen typically demonstrate ownership across that full lifecycle: they can author a threat model for a new email-parsing pipeline, review the PR that implements it, and instrument runtime detection for the anomalies the model predicted.
Encryption fluency is non-negotiable. The research notes "you can encrypt in transit and you can encrypt at rest very easily and that's effectively the most secure way to do this," and emphasizes "having a secure vault instead of having these in a notepad or a notebook" for programmatic decryption. For a company processing email and cloud-office data at scale, applicants need concrete experience with KMS integration, envelope encryption patterns, and key-rotation automation — not textbook definitions.
CI/CD guardrails are another hard filter. The research frames CI/CD as the mechanism that "allows you to set guard rails and increase the velocity of shipping code," citing deployment frequencies of "10 times a day, 100 times a day, a thousand times a day at the scale of like, you know, Amazon or Meta." Material's engineering roles expect candidates who have built those guardrails: static analysis gates, container image signing, policy-as-code enforcement, automated rollback on detection. The Sr. Manager role in particular will be evaluated on whether they've scaled such pipelines across multiple teams.
Container isolation knowledge appears in the research as "limit the blast radius by ensuring that each container is kind of purpose-built." For the Cloud Office Security role, that translates to hands-on experience with gVisor, Kata Containers, or Firecracker — technologies enforcing workload boundaries in multi-tenant SaaS environments. Generic Kubernetes hardening checklists don't substitute for having debugged a namespace escape in production.
SSO and identity federation round out the technical screen. The research warns "you never want to try to deploy SSO across the entire organization because you're going to get a lot of push back," advising instead to "find a project to implement SSO on" and "show here's how we deployed SSO here's how it enabled the team." Material's Solutions Engineer and Account Executive roles need candidates who have navigated that organizational friction, not just configured Okta or Entra ID. The ability to articulate a phased rollout ("start with a small scope get success there and then use that success to then amplify") separates implementers from administrators.
Clearance requirements remain opaque in public data. Neither the board listings nor the research digest specify active clearance levels (TS/SCI, Secret, Public Trust) for these roles. Given Material's focus on email and cloud-office security for enterprise and government customers, Public Trust or Secret eligibility is a reasonable baseline assumption for engineering roles handling customer data pipelines. Candidates should treat clearance readiness as a force multiplier: the technical bar stays the same, but an active clearance compresses onboarding from months to weeks.
The research also surfaces a soft-skill filter hiring managers weight heavily: "we also forget sometimes as security engineers that people have a perception of us and that perception you know is in your hands to to like elevate and resolve." Candidates who frame security as an enabler ("this actually helps the business by justifying a lower premium") advance further than those who present it as a gate. In practice, that means interview answers reference specific business outcomes: reduced cyber-insurance premiums, accelerated sales cycles from compliance artifacts, engineering velocity gains from automated guardrails.
Bottom line: the screen selects for engineers who have built product security from concept to runtime, automated it into CI/CD, hardened the container layer, and negotiated identity rollouts with stakeholders — all while speaking the language of business risk reduction. The six roles collectively demand that profile at senior IC, lead, and customer-facing technical levels.
Competitors Feel the Heat
Anduril Industries, the defense-tech unicorn valued at $61 billion as of May 2026, now lists more than 560 open positions on ClearanceJobs.com requiring a Public Trust clearance — a single-company footprint large enough to move the needle on the entire cleared-engineer market. The roles span software engineering, hardware design, data science, and operations, mirroring the same blend of cloud-native development and low-level systems work Material's postings emphasize. Anduril's hiring velocity accelerated after a $5 billion round closed in May 2026 (following a $2.5 billion Series F in June 2025 and a reported $4 billion round at $60 billion valuation in March 2026), giving it capital to outbid traditional primes for the same cleared talent pool.
The DoD's own civilian hiring crisis amplifies the competition. A December 2024 ClearanceJobs report cited House and Senate conferees' findings that direct-hire authorities and pay incentives have failed to close mission-critical gaps, with OPM approval delays slowing every recruitment cycle. When government cannot fill seats, contractors absorb the demand — and Anduril's 7,000-person headcount makes it the largest single magnet for engineers who hold or can obtain Public Trust, Secret, or Top Secret eligibility.
Boeing's concurrent contraction feeds that pool. The aerospace giant cut nearly 400 workers in Washington and over 500 in California in late 2024, part of a 17,000-job reduction plan tied to financial setbacks and a prolonged machinists' strike. Those displacements put cleared avionics, embedded-systems, and mission-software engineers on the market at the same moment Anduril and cloud-security firms are scaling. Recruiters at multiple defense-tech startups confirm privately that Boeing alumni now appear in candidate slates for roles that previously drew only from the traditional prime-contractor circuit.
Program-level shifts redirect hiring priorities in real time. The U.S. Navy canceled the Modular Attack Surface Craft (MASC) program in March 2026, replacing it with a marketplace model for Medium Unmanned Surface Vessels (MUSVs) that rewards at-sea demonstration over paper proposals. When the Navy announced its initial seven vendors (Leidos, Huntington Ingalls Industries, Saronic Technologies, and Sea Machines among them), Anduril was absent from the roster, prompting its exit from the former Foss Maritime shipyard on Seattle's Lake Washington Ship Canal. That withdrawal freed roughly 560 Seattle-area engineers (up from roughly 30 four years ago) to redeploy toward autonomous systems, edge-compute, and AR-display work, skill sets overlapping heavily with the email-security and cloud-office-security stacks Material advertises.
The broader pattern is a sector-wide scramble for cleared engineers, fueled by DoD shortages, prime-contractor layoffs, and program restructures, in which every firm, Material included, is adjusting requirements and compensation to the same external pressures.
What the Market Signals
Material Security's six openings, spanning email security engineering, cloud office security, solutions engineering, and sales roles with salary bands from $190,000 to $260,000, sit at the intersection of cloud security and defense-adjacent missions. The screen they run is not a generic tech filter. It looks for two non-negotiables up front: U.S. citizenship and security clearance eligibility. The Department of Defense's April 2025 hiring memo makes this explicit — citizenship and clearance eligibility are the first gate for any defense-facing role. If you lack an active clearance, apply anyway; companies willing to sponsor can initiate the investigation process, but you must be eligible to start.
The technical bar is specific. For the Senior Software Engineer, Cloud Office Security role ($190,000–$235,000), FIRST-PARTY BOARD DATA found, the stack centers on cloud email platforms (Microsoft 365, Google Workspace) and the detection logic sitting on top. The Sr. Manager, Email Security Engineering role ($235,000–$260,000), FIRST-PARTY BOARD DATA reported, expects architecture ownership across threat detection, data loss prevention, and encryption workflows. Solutions Engineer candidates ($200,000–$225,000) need to translate those same capabilities into customer deployments. Certifications mapping directly to this work: CompTIA Security+ and AWS Cloud Practitioner. The Hampton Roads defense hiring guide names both as priority credentials for defense and general IT roles. They signal you speak the compliance and infrastructure language Material's screen weights heavily.
DoD's new hiring priorities, outlined in the April 2025 memo, shifted from potential to proof. "It's no longer enough to show potential; you need to show proof," the guidance states. Resumes that advance highlight measurable outcomes tied to mission readiness: detection rule coverage improvements, mean-time-to-respond reductions, compliance audit passes, cost savings from tool consolidation. A bullet reading "built detection rules" loses to "authored 47 detection rules covering MITRE ATT&CK techniques T1566.001 and T1114, reducing phishing dwell time from 4.2 hours to 18 minutes across 12,000 mailboxes." The latter shows the warfighter-mission connection DoD now demands: operational improvement, quantified.
Sector tailoring matters. A project for a defense contractor emphasizes robustness and security; a bank project highlights explainability and regulatory awareness. Material sells into both. Your resume should mirror the buyer. If you've deployed email security in a FedRAMP environment, lead with that. If you've integrated with SIEMs used in IC environments (Splunk, Chronicle, Sentinel), name them. SCI access is not a clearance level but a determination based on need-to-know; if you've held it, list the program or customer, not just the acronym.
Timing is tactical. Competitive summer internships at major defense employers open applications the prior fall, September through November. For Material's current sprint, the roles are live now. The clearance jobs market moves fast; more than four million Americans hold active clearances, but a clearance without a matching skill set stalls. If you hold a clearance but lack the cloud-email depth, consider entry roles in admin or custodial work that keep the clearance current while you upskill. The 24-month post-military clearance window is real; a Periodic Reinvestigation is required every five years for Top Secret, ten for Secret. Don't let it lapse.
The six roles Material posted this week are a threat model in reverse: they show exactly which attack surfaces the company expects to defend next. The same logic applies to the talent market. When Anduril posts 560 cleared roles and Boeing releases 900 cleared engineers in the same quarter, the signal is clear: the detection pipeline for talent has shifted. The engineers who clear the next screen won't just have the right keywords. They'll have already instrumented the runtime.
Working in frontier tech? Zero G Talent tracks the openings: see every open Material Security role, browse frontier tech jobs, the companies hiring, and the people building the field.