Cybersecurity Engineer II

Firefly Aerospace; Leander (TX); Sur place; USD 120 000 - 180 000; Plein temps

Avantages offerts par ce poste

Health, dental, and vision plans

Parental leave

Relocation benefits

Educational reimbursement

Short term disability

Flexible PTO

Résumé du poste

Firefly Aerospace is seeking a security engineer to design and maintain protection for Linux/macOS endpoints and cloud infrastructure. You will enforce hardening, assess vulnerabilities, and drive incident response across Kubernetes and containerized apps, including Docker environments.

The role emphasizes policy development, risk reduction, and collaboration with internal teams to stay ahead of threats and compliance needs.

Qualifications

• Bachelor’s degree in Computer Science, Information Security or a related field.
• 2+ years in information security engineering focusing on Linux/macOS security.
• Proficiency with Linux/Unix/macOS, security configuration and hardening.
• Knowledge of Kubernetes and container security best practices.
• Experience with CI/CD security and incident response processes.

Responsabilités

• Design, implement, and maintain security measures across Linux/macOS and cloud environments.
• Own security posture for Unix-based endpoints and servers, including hardening and vulnerability management.
• Monitor logs, perform incident response, and remediate threats promptly.
• Secure Kubernetes clusters with RBAC, network policies, and pod security standards.
• Secure Docker/Kubernetes containerized apps and manage image registries.
• Develop and maintain incident response plans, playbooks, and audits.

Connaissances

Linux security

macOS security

Kubernetes security

CI/CD security

Threat detection

Formation

Bachelor's degree in CS or Info Security

Outils

Kubernetes

Docker

Terraform

Ansible

Chef

Description du poste

Firefly Aerospace offers generous health, dental and vision plans with low plan deductibles, along with parental leave, relocation benefits, educational reimbursement, short term disability, and flexible PTO options.

Responsibilities

You will design, implement, and maintain security measures across Linux and macOS environments, extending secure practices into cloud infrastructure and containerized environments. This role includes ownership of the security posture for the Unix-based endpoint and server fleet, covering hardening, vulnerability management, threat response, compliance, and documentation.

• Develop, implement, and maintain security policies and procedures for Linux and macOS systems aligned with ISO 27001, SOC 2, PCI-DSS, and NIST.
• Perform regular security assessments and vulnerability scans across Linux and macOS endpoints and servers, applying patches and hardened configurations.
• Monitor security tooling and Linux/macOS logs for suspicious activity; analyze security incidents and respond promptly to contain and remediate threats.
• Manage endpoint protection, device compliance, and configuration baselines for the Linux and macOS fleet.
• Secure Kubernetes clusters using best practices such as RBAC, network policies, and pod security standards.
• Secure containerized applications using Docker and Kubernetes, ensuring integrity of container images and registries.
• Monitor and remediate vulnerabilities within container environments.
• Monitor security tools and systems for alerts and events; investigate and respond to incidents.
• Develop and maintain incident response plans and playbooks, including regular drills.
• Coordinate with internal and external stakeholders during incident response.
• Maintain comprehensive documentation of security policies, procedures, and configurations with emphasis on Linux/macOS environments.
• Support security audits and assessments by preparing necessary documentation and evidence.
• Stay current on emerging threats, technologies, and regulatory requirements, adapting security strategies accordingly.

Requirements

• Bachelor’s degree in Computer Science, Information Security, or a related field.
• 2+ years of experience in information security engineering with a strong focus on Linux and macOS security.
• Proficiency in Linux/Unix/macOS operating systems, including security configuration, hardening, and best practices.
• Working knowledge of Kubernetes and container orchestration platforms and their security best practices.
• Excellent problem-solving skills, attention to detail, and the ability to work independently and collaboratively.

Technologies

• Linux, macOS, Linux/Unix
• Kubernetes, Docker
• RBAC, network policies, pod security standards
• Container images, container registries
• ISO 27001, SOC 2, PCI-DSS, NIST
• SIEM

Desired

• Certifications such as CISSP, AWS Certified Security – Specialty, CKS, or similar.
• Experience with compliance frameworks including NIST, ISO 27001, SOC 2, and PCI-DSS.
• Experience with cloud platforms (e.g., AWS, Azure) including security services and configurations.
• Familiarity with configuration management tools (e.g., Ansible, Terraform, Chef) and infrastructure as code practices.
• Experience with containerization technologies (e.g., Docker, Kubernetes) and their security considerations.
• Experience with SIEM monitoring tools and incident response processes.
• Strong understanding of networking concepts, protocols, and security measures.
• Knowledge of DevSecOps practices and integrating security into CI/CD pipelines.

Eligibility (ITAR)

To conform to U.S. Government Space Technology export regulations, including the International Traffic in Arms Regulations (ITAR): you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State.

Location: Leander, TX (onsite)