Security Contractor

The marine industry supports recreation, global commerce, and national defense. And yet it runs on technology that hasn't meaningfully changed in fifty years. Until now.

Arc is on a mission to electrify the marine industry. We're rethinking powertrains, software, and vessel designs from first principles. And we're already executing. We started with consumers to develop and harden our core technology. We’re now scaling production of our flagship model with new models and sectors on the horizon. Now we’re extending our platform to commercial applications, starting with tugs, ferries, and defense, with years worth of signed contracts and a pipeline that spans every vessel type on the water.

The technology is proven, the momentum is building, and the opportunity is enormous. The marine industry is going electric and Arc is building the platform that powers it

We're looking for someone fired up by the mission and ready to build. You'll thrive here if you move fast, take ownership, and care about the details. 

This is a full-time, on-site role at our Los Angeles headquarters.

• →Leading compliance readiness and ongoing security practices for government and export-control requirements, including CMMC, ITAR, NIST SP 800-171, and related contractual obligations
• →Developing deep defenses against phishing, business email compromise, and account takeover with tools like employee training, simulations, email security controls, reporting, investigation, and response
• →Establishing risk assessments, audit evidence, and practical controls across the organization
• →Strengthening identity, endpoint, data, cloud, infrastructure, application, and vendor security through hands-on reviews and remediation
• →Monitoring security events, coordinating incident response, managing vulnerabilities, and communicating priorities to technical and nontechnical stakeholders

• 6+ years of broad information security experience spanning technical, operational, governance, risk, and compliance responsibilities
• Demonstrated experience supporting government security requirements, regulated environments, audits, or formal compliance programs
• Strong working knowledge of identity and access management, endpoint security, cloud security, data protection, vulnerability management, and security monitoring
• Ability to work independently, prioritize high-impact risks, implement practical and pragmatic controls, and communicate clearly across engineering and business teams

• Experience leading CMMC readiness, assessment preparation, remediation, or evidence collection
• Experience administering phishing simulations, secure email platforms, domain-protection controls, or security-awareness programs
• Experience with AWS or Google Cloud Platform and with TypeScript or Python
• Experience securing hardware-related products, embedded devices, mobile applications, IoT systems, marine systems, or clean-energy technology
• Comfortable pushing a fast but sustainable pace
• Enthusiasm for boating and clean energy

At Arc, we encourage diversity and consider all qualified applicants equally for employment, regardless of background, identity, or status. You’re always welcome to reach out even if you don’t meet many of these qualifications. Passion and aptitude make up for a lot.

We move with urgency and build with care. We value these five things above all else:

• Ownership over both your work and the company’s success
• Empathy for colleagues and for customers
• Humility  in problem solving and collaboration
• Pragmatism for navigating ambiguity quickly and sensibly 
• Inclusion of different backgrounds, opinions, cultures, and perspectives.

We want people who share and embody these values. It is vital that our values align - we’d be happy to elaborate on any or all of these during the interview process.