Cybersecurity Architect

Apex - Spacecraft Manufacturing; Los Angeles (CA); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Equity

Health insurance

Paid time off (PTO)

401(k) matching

Parental leave

Daily catered lunch

Office in Playa Vista

Job summary

Apex Technology, Inc. in Playa Vista, CA, is seeking a hands-on Cybersecurity Architect to own security design across corporate and development environments, working closely with IT, Engineering and Operations to bake security into design from day one.

You will translate NIST SP 800-171 and CMMC Level 2 into actionable technical designs, evaluate CrowdStrike, Tenable, SIEM and endpoint tools, and guide architecture discussions on Palo Alto, segmentation and data flows as systems evolve.

Qualifications

• 5+ years hands-on experience in security engineering or cybersecurity architecture.
• Strong knowledge of AWS security, identity, network and endpoint security.
• Experience designing environments spanning cloud, SaaS, endpoints, and networks.
• Working knowledge of NIST SP 800-171 and CMMC Level 2 with ability to map controls to implementations.
• Ability to produce clear architecture diagrams and security standards for engineering teams.

Responsibilities

• Create security architecture for Apex corporate and development environments.
• Translate NIST SP 800-171 and CMMC Level 2 requirements into designs and steps for engineers.
• Work with CrowdStrike, Tenable, SIEM, and endpoint management tools to identify gaps.
• Support ATO and other security activities with architecture docs and guidance.
• Facilitate conversations with network and infrastructure teams on Palo Alto architecture, segmentation, and rule design.
• Define CUI boundaries, diagrams, and data flows as systems evolve.

Skills

Security engineering

Cloud security

Infrastructure security

Cybersecurity architecture

NIST familiarity

Tools

CrowdStrike Falcon

Tenable

SIEM

Palo Alto Networks

AWS Security

Job description

About the Role

Apex is looking for a Cybersecurity Architect to take ownership of the security design and implementation across our cybersecurity infrastructure. This is a hands-on technical role that works closely with IT, Engineering, and Operations to build security into the design from the start.

Responsibilities

• Create security architecture for Apex corporate and development environments.
• Translate NIST SP 800-171 and CMMC Level 2 requirements into technical designs and implementation steps that engineering teams can execute.
• Work with CrowdStrike, Tenable, SIEM, and endpoint management tools to identify and remediate gaps across our security environment.
• Support ATO and other security activities with technical architecture documentation, control implementations, and implementation guidance.
• Facilitate conversations with network and infrastructure teams on Palo Alto architecture, segmentation, remote access, and rule design.
• Define CUI boundaries, network diagrams, and data flows as systems and programs change.

Requirements

• Active TS/SCI clearance required at time of hire
• US Citizenship required
• 5 or more years of hands-on experience in security engineering, cloud security, infrastructure security, or cybersecurity architecture
• Strong working knowledge of AWS security, Microsoft identity, network security, endpoint security, vulnerability management, logging, and secure administrative access
• Experience designing or reviewing environments that span cloud, SaaS, endpoints, networks, servers, and software services
• Working knowledge of NIST SP 800-171 and CMMC Level 2, with the ability to connect a control requirement to a technical implementation
• Ability to produce clear architecture diagrams, security standards, technical decisions, and implementation guidance for engineering teams

Preferred Qualifications

• Experience with Microsoft GCC High, Palo Alto, CrowdStrike Falcon, Tenable, AWS GovCloud, Entra ID, Elastic, CyberArk, Terraform, containers, or Kubernetes
• Experience supporting aerospace, defense, national security, ATO, RMF, or other regulated technical environments
• CISSP, CCSP, AWS Security Specialty, or a comparable technical security certification
• Experience supporting aerospace, defense, national security, ATO, RMF, or other regulated technical environments

Why Join Apex?

Apex believes in creating a work environment that you look forward to embracing every day. Our employees love working at Apex, and we want you to love it too. We're a fast-growing startup that has raised more than $500M in funding, and we invest heavily in our people from day one.

What We Offer For Full-time Employees:

• Shared upside: Receive equity in Apex, letting you benefit from the work you create
• Best-in-class healthcare: 100% company-paid medical, dental, and vision for you and your dependents, plus $100k life insurance at no cost
• Comprehensive PTO package to reset and recharge - starting at 15 days vacation, growing to 20+ days annually, plus 10 paid holidays
• Competitive 401(k) plan with generous matching - 100% match on first 3%, 50% on next 2%
• 8 weeks paid parental leave plus childcare reimbursement up to $350/day for work-related travel
• Daily catered lunch and unlimited snacks to keep you fueled throughout the day
• Vibrant community: Monthly office socials, pickleball tournaments, run club, and gatherings for you and your family
• Your dream desk setup and all the tools you need to be your most productive self
• World-class Playa Vista office with the benefit of in-person collaboration with amazing coworkers and flexibility to integrate work and life
• Real impact opportunity: Work alongside experts from aerospace, new space, and other cutting-edge industries to make a lasting difference

Ready to join a team where your contributions matter and your future is bright? Let's build something extraordinary together.

Equal Opportunity Employer

Apex Technology, Inc. is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. Candidates and employees are always evaluated based on merit, qualifications, and performance. We will never discriminate on the basis of race, color, gender, national origin, ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability, or any other legally protected status.