Security Engineer

Spacex; Starbase (TX); On-site; USD 140,000 - 190,000; Full time

Job summary

SpaceX is seeking a Security Engineer to join Information Security to protect and drive the SpaceX mission. You will design, build, and operate security software and infrastructure that defends SpaceX systems, networks, and data.

You will implement authentication, PKI, IAM, and cloud security controls, run backend services, and collaborate across teams to reduce risk while delivering scalable, secure solutions.

Qualifications

• Bachelor's degree in CS or STEM or equivalent professional experience.
• 2+ years of security software development experience can substitute for a degree.
• Experience designing security solutions for OS, distributed systems, or large-scale infrastructure.

Responsibilities

• Design, build, and maintain technology that protects SpaceX systems, networks, and data.
• Stand up authentication and identity services, multi-factor authentication, and network access control identity.
• Automate identity lifecycle for Information Security and partner organizations.
• Run backend infrastructure that network security services depend on.
• Operate web application firewalls and other application-level security controls.
• Enforce cloud security policy, centralized configuration, and monitoring.
• Document what you run, keep it working, and advise other teams on it.
• Find threats and gaps with security and IT, then ship software and deployment changes that reduce risk.
• Deliver solutions that are scalable, repeatable, maintainable, and secure.
• Coordinate with information security, physical security, IT, HR, legal, software, and other partners.

Skills

Security software development

Python

Go

C#

C/C++

Rust

Security design

Education

Bachelor's degree in CS or STEM

2+ years security software development experience in lieu of degree

Tools

PKI

SAML

OIDC

OAuth

TPMs/HSMs

TCP/IP

Job description

SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today SpaceX is actively developing the technologies to make this possible, with the ultimate goal ofenabling human life on Mars.

SECURITY ENGINEER

SpaceX is looking for a Security Engineer to join Information Security to help protect and drive the SpaceX mission.

Information drives our business. We must protect the confidentiality, integrity, and availability of systems and processes across the enterprise, and defend against loss of control or confidence in our systems. This role writes and operates the software and infrastructure behind SpaceX security standards.

RESPONSIBILITIES:

• Design, build, and maintain technology that protects SpaceX systems, networks, and data.
• Stand up authentication and identity services, multi-factor authentication, and network access control identity.
• Automate identity lifecycle for Information Security and partner organizations.
• Run backend infrastructure that network security services depend on.
• Operate web application firewalls and other application-level security controls.
• Enforce cloud security policy, centralized configuration, and monitoring.
• Document what you run, keep it working, and advise other teams on it.
• Find threats and gaps with security and IT, then ship software and deployment changes that reduce risk.
• Deliver solutions that are scalable, repeatable, maintainable, and secure.
• Coordinate with information security, physical security, IT, HR, legal, software, and other partners.

BASIC QUALIFICATIONS:

• Bachelor's degree in computer science or another STEM discipline; OR 2+ years of professional experience in security software development in lieu of a degree.
• Experience with Python, Go, C#, C/C++, or Rust.
• Experience designing and implementing security solutions for operating systems, distributed systems, or other enterprise / large-scale infrastructure.

PREFERRED SKILLS AND EXPERIENCE:

• Writing, shipping, and operating secure software.
• Linux, Windows, and macOS system internals.
• Public key infrastructure (PKI) and related technologies.
• SAML, OIDC, and OAuth.
• TPMs and HSMs.
• TCP/IP and UDP at the level needed to build and debug services.
• Navigating large, interactive systems.
• Web APIs, HTTP-RPC, and REST.
• Hardening Windows, Linux, and macOS to enterprise security controls.
• macOS and Windows code-signing and enterprise application deployment.

ADDITIONAL REQUIREMENTS:

• Must be willing to work extended hours and/or weekends as needed.
• This role requires you to be onsite. Hybrid or remote work will not be considered.
• Ability to pass Air Force background check for Cape Canaveral.
• To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here .

SpaceX is an Equal Opportunity Employer; employment with SpaceX is governed on the basis of merit, competence and qualifications and will not be influenced in any manner by race, color, religion, gender, national origin/ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability or any other legally protected status.

Applicants wishing to view a copy of SpaceX’s Affiantive Action Plan for veterans and individuals with disabilities, or applicants requiring reasonable accommodation to the application/interview process should reach out to [e-mail] .

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey.Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiringprocess or thereafter. Any information that you do provide will be recorded and maintained in aconfidential file.

As set forth in SpaceX’s Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection.As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measurethe effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categoriesis as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.