Principal Cloud Security Engineer

Rocket Lab Corporation; Long Beach (CA); Vor Ort; USD 152.000 - 203.000; Vollzeit

Benefits dieser Stelle

Company stock as part of total comp

Employee Stock Purchase Program with —

Top-tier medical plans (HMO, PPO, HDHP

Dental and vision coverage

Paid vacation and sick time

11 paid holidays

Flexible spending accounts

Dependent care accounts

Paid parental leave

Disability and life insurance

401(k) with company match

Subsidized EV charging

Onsite fitness centers

Discounted gym memberships

Complimentary snacks and beverages

50% merch store discount

Zusammenfassung

Rocket Lab Corporation is seeking a Principal Cloud Security Engineer to secure its cloud footprint across hybrid environments, automation pipelines, and critical platforms. Based onsite in Long Beach, CA, you will lead security controls, risk analyses, and governance, collaborating with multiple teams to embed best practices in SDLC, DevOps, and MLOps.

You will work with cloud-native tools, drive automation, and support incident response, compliance, and security awareness across the

Qualifikationen

• 12+ years of experience in scripting languages (e.g., Bash, PowerShell, Python) and configuration management/infrastructure as code tools (e.g., Puppet, Ansible, Terraform).
• Bachelor’s degree or equivalent years of work experience (16+ years of total work experience)
• Cloud security architecture across AWS, Azure, Google Cloud
• Hands-on experience with cloud security tools and services (AWS Security Hub, Azure Security Center, Google Cloud Security Command Center)
• Experience with US Government compliance regimes (CMMC, NIST, DISA STIG) and ITIL/Change Review systems
• Proficiency in vulnerability management systems (Tenable, Bringa) and CLI scanning tools (Trivy, OpenSCAP)
• Extensive experience with git-driven version control systems (GitHub, GitLab, Bitbucket)
• Strong networking, encryption, and secure communication knowledge
• Data and analytics experience with PostgreSQL/SQLite and Parquet/Arrow; PowerBI/Jupyter
• US citizenship required per program requirements

Aufgaben

• Design, implement, and maintain security controls for hybrid cloud environments (IaaS, PaaS, SaaS, FaaS).
• Design and develop custom automation to achieve cyber team objectives.
• Provide security support for internal and external design reviews related to security.
• Conduct security assessments and risk analyses to identify vulnerabilities and develop mitigation strategies for cloud, CI/CD pipelines, and agentic systems.
• Work with Infrastructure Operations to implement and manage IAM solutions for cloud resources and applications.
• Develop documentation, plans, and proofs of concept for cybersecurity-related platform improvements.
• Configure and monitor cloud security tools and services.
• Collaborate with development teams to integrate security into SDLC, DevOps, and MLOps.
• Maintain awareness of emerging threats and recommend proactive security improvements.
• Provide guidance on incident response, compliance, and security awareness training.
• Participate in regular security audits, assessments, and regulatory compliance reviews.

Kenntnisse

Cloud security architecture

Scripting Bash/PowerShell/Python

IaC tools Terraform/Ansible

IAM and cloud access

Security risk assessments

Vulnerability management

GitHub/GitLab/Bitbucket

Networking and encryption

US government compliance (CMMC/NIST)

Cloud security tooling

Ausbildung

Bachelor’s degree or equivalent (16+ years total experience)

Tools

AWS Security Hub

Azure Security Center

Google Cloud Security Command Center

Tenable

Trivy

OpenSCAP

Git tooling (GitHub/GitLab/Bitbucket)

Cloud Custodian

Panther

PowerBI

Jupyter

Parquet/Arrow data formats

Jobbeschreibung

Rocket Lab is the end-to-end space company building rockets, spacecraft, and critical subsystems that keep the world connected, protected, expand humanity’s reach to the Moon, Mars, and beyond. We move fast, build real hardware for meaningful missions, and make the impossible routine. Come shape the future with us.

IT

Rocket Lab’s IT team is responsible for how our global teams access information and run operations across our computer systems, networks, and devices. Our hardworking IT team is a group of flexible problem-solvers working in a fast-paced environment but who also thrive under the challenge of supporting all of our proprietary systems and people, from finance to launch operations.

Principal Cloud Security Engineer

Based onsite at Rocket Lab's office in Long Beach, CA the Principal Cloud Security Engineer must demonstrate a firm grasp of cloud-first, automated, API-driven security and statistical risk concepts and communication. They will work on securing all facets of Rocket Lab’s cloud presence: the wide array of vendor services, code pipelines deploying into prod and non-prod environments, and automation performing an assortment of business-critical operations. They will provide analyses including quantifiable statistical information regarding IT and Cybersecurity risk to business partners with fiduciary responsibility. They will support the IT organization to develop a secure, reliable, and fiercely efficient platform to empower the Rocket Lab’s objectives as a rapidly growing multinational space company.

What you’ll get to do:

• Design, implement, and maintain security controls for hybrid cloud-based environments, including infrastructure as a service (IaaS), platform as a service (PaaS), software as a service (SaaS), and function as a service (FaaS) solutions.
• Design and develop custom automation in pursuit of cyber team objectives.
• Provide security support for internal and external design reviews related to security.
• Conduct security assessments and risk analyses to identify vulnerabilities and develop mitigation strategies for automated infrastructure such as public cloud, CI/CD pipelines, and agentic systems.
• Work with Infrastructure Operations to Implement and manage identity and access management (IAM) solutions to control access to cloud resources and applications.
• Develop documentation, plans, and proofs of concept for cybersecurity-related platform improvements.
• Configure and monitor cloud security tools and services.
• Collaborate with development teams to integrate security best practices into the software development lifecycle (SDLC), DevOps, and MLOps processes.
• Maintain systems to help the team stay up-to-date on emerging threats, vulnerabilities, and industry best practices related to DevSecOps/MLOps and recommend proactive measures to enhance security posture.
• Provide guidance and support to internal teams on security-related matters, including incident response, compliance, and security awareness training.
• Participate in regular security audits, assessments, and compliance reviews to ensure adherence to regulatory requirements and industry standards.

You’ll bring these qualifications

• Education and Experience in IT and Cybersecurity
• 12+ years of experience in scripting languages (e.g., Bash, PowerShell, Python) and configuration management/infrastructure as code tools (e.g., Puppet, Ansible, Terraform).
• Bachelor’s degree or equivalent years of work experience (16+ years of total work experience)
• Cloud Security and Architecture Expertise
• Proven experience in cloud security architecture, design, and implementation across major cloud platforms (AWS, Azure, Google Cloud).
• Hands-on experience with cloud security tools and services (e.g., AWS Security Hub, Azure Security Center, Google Cloud Security Command Center).
• Compliance, Vulnerability Management, and IT Governance
• Experience working under US Government compliance regimes (e.g., CMMC, NIST, DISA STIG) and ITIL/Change Review systems.
• Proficiency in vulnerability management systems (e.g., Tenable, Bringa) and CLI scanning tools (e.g., Trivy, OpenSCAP).
• Version Control, Networking, and Secure Communication
• Extensive experience with git-driven version control systems (e.g., GitHub, GitLab, Bitbucket).
• Strong understanding of networking concepts, encryption techniques, and secure communication protocols.
• Data and Analytics Expertise
• Experience with databases (e.g., PostgreSQL, SQLite) and data formats (e.g., Parquet, Arrow).
• Proficiency in analytics systems (e.g., PowerBI, Jupyter) and vendor-agnostic assessment engines (e.g., Cloud Custodian, Panther).
• U.S. citizenship is required, due to program requirements.

These qualifications would be nice to have

• Advanced degree in computer science, information technology, cybersecurity, or equivalent career experience
• Involvement with community cybersecurity organizations
• Experience with the following
• AWS GovCloud / Azure GCC High
• CI/CD pipeline security
• Tier 2 cloud vendors
• Hybrid cloud engineering
• SAST and DAST testing
• Secrets management / vaults / HSMs
• Cloud incident response / forensics
• Log aggregators like Graylog, ELK, or Splunk

This position may require prolonged periods of sitting, standing, walking, computer work, and occasional exposure to moderate levels of noise, dust, and fumes in production areas.

Join one of the world's fastest-growing space companies and own a piece of it. In addition to competitive base pay,you’ll receive company stock as part of your total compensation package, giving you a direct stake in our success. As we expand to new launch sites, groundbreaking missions, and global markets, your ownership has the opportunity to grow alongside the company.

Our comprehensive benefits package includes our industry-leading Employee Stock Purchase Program (with a 15% discount on company stock), top-tier medical plans (HMO, PPO, and a zero cost HDHP option with a significant HSA company contribution), dental and vision coverage, paid vacation and sick time, 11 paid holidays, flexible spending and dependent care accounts, paid parental leave, disability and life insurance, and a 401(k) retirement plan with company match.

Additional perks include subsidized EV charging, onsite fitness centers (where available), discounted gym memberships, complimentary snacks and beverages, 50% employee discount on our popular merch store, and a variety of other employee discounts.

Level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, and experience.

Base Pay Range (CA Only)

$152,300 - $203,000 USD

What to expect

We’re on a mission to unlock the potential of space to improve life on Earth, but that’s not an easy task. It takes hard work, determination, relentless innovation, teamwork, grit, and an unwavering commitment to achieving what others often deem impossible. Our people out-think, out-work, and out-pace. We pride ourselves on having each other’s backs, checking our egos at the door, and rolling up our sleeves on all tasks big and small. We thrive under pressure, work to tight deadlines, and our focus is always on how we can deliver, rather than dwelling on the challenges that stand in the way.

For candidates seeking to work in US offices only

To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR), Rocket Lab Employees must be a U.S. citizen, lawful U.S. permanent resident (i.e., current Green Card holder), or lawfully admitted into the U.S. as a refugee or granted asylum, or be eligible to obtain the required authorizations from the U.S. Department of State and/or the U.S. Department of Commerce, as applicable. Learn more about ITAR here .

Rocket Lab provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws. This policy applies to all terms and conditions of employment at Rocket Lab, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.

Applicants requiring a reasonable accommodation for the application/interview process for a job in the United States should contact Giulia Johnson at [e-mail]. This dedicated resource is intended solely to assist job seekers with disabilities whose disability prevents them from being able to apply/interview. Only messages left for this purpose will be considered. A response to your request may take up to two business days.

For candidates seeking to work in New Zealand offices only

For security reasons, background checks will be undertaken prior to any employment offers being made to an applicant. These checks will include nationality checks as it is a requirement of this position that you be eligible to access equipment and data regulated by the United States' International Traffic in Arms Regulations.

Under these Regulations, you may be ineligible for this role if you hold citizenship of Australia, Japan, New Zealand, Switzerland, the European Union, or a country that is part of NATO, or if you hold ineligible dual citizenship or nationality. For more information on these Regulations, click here ITAR Regulations.

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in Rocket Lab Corporation’s Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.