Senior Security Engineer

muonspace; United States; Hybrid; USD 193,000 - 218,000; Full time

Benefits offered by this job

Hybrid/remote work option

Comprehensive benefits

Equity grant

Paid vacation & holidays

Job summary

MuonSpace is seeking a senior security engineer to safeguard infrastructure, data, and personnel across endpoints, networks, and cloud. The role blends hands-on security work with compliance ownership for frameworks like NIST 800-171 and ITAR/EAR controls.

The position is hybrid (San Jose, CA three days onsite) or fully remote from an approved U.S. location, with a strong focus on IAM, EDR/XDR, vulnerability management, and cloud security in AWS.

Qualifications

• 5+ years in information security or security engineering roles.
• Hands-on experience with EDR/XDR platforms such as CrowdStrike or SentinelOne.
• Experience with enterprise vulnerability scanners (Tenable, Qualys, Rapid7, or comparable).
• Working knowledge of Okta or Azure AD administration and IAM principles.
• Cloud security in AWS: IAM, VPC, SGs, CloudTrail, GuardDuty, Config.
• Familiarity with SIEM platforms (Splunk, Sentinel, Elastic, etc.) for log analysis.
• Solid networking fundamentals: firewalls, proxies, DNS security, segmentation.
• Experience with compliance frameworks: NIST 800-171, CMMC, SOC 2, ISO 27001.
• Strong written and verbal communication with engineers and leadership.

Responsibilities

• Design, deploy, and tune endpoint detection and response tooling across macOS and Windows fleets.
• Architect and operate network security controls including firewalls, IDS/IPS, segmentation, and VPNs.
• Run the vulnerability management lifecycle: scanning, prioritization, remediation coordination, closure.
• Administer IAM platforms (Okta, AWS IAM) including SSO, conditional access, privileged reviews.
• Build SIEM detections, response playbooks, and ongoing monitoring for security signals.
• Review new tools, vendors, and architectural changes for security impact.
• Manage cloud security posture in AWS: IAM hygiene, S3 protections, security group reviews, CloudTrail/GuardDuty.
• Maintain documentation, support audits, and contribute to security policy development.

Skills

EDR XDR tooling

IAM administration

SIEM platforms

Cloud security

Network security

Compliance frameworks

Tools

CrowdStrike

SentinelOne

Tenable

Qualys

Rapid7

Okta

Azure AD

Splunk

CloudTrail

GuardDuty

Terraform

CloudFormation

Job description

Role overview

A senior security engineer is needed to independently safeguard infrastructure, data, and personnel across endpoints, networks, cloud environments, and identity systems. The position combines hands-on technical security work with compliance ownership for frameworks like NIST 800-171 and ITAR/EAR controls. It is a hybrid role based out of a San Jose, CA office (three days onsite) or fully remote from an approved U.S. location.

Responsibilities

• Design, deploy, and tune endpoint detection and response tooling across macOS and Windows fleets, including alert triage and incident handling.
• Architect and operate network security controls such as firewalls, IDS/IPS, segmentation, and VPN infrastructure.
• Run the vulnerability management lifecycle: scanning, prioritization, remediation coordination with engineering, and closure tracking.
• Administer and harden IAM platforms (Okta, AWS IAM) including SSO, conditional access, privileged access reviews, and lifecycle automation.
• Build SIEM detections, response playbooks, and ongoing monitoring for security-relevant signals.
• Conduct security reviews of new tools, vendors, and architectural changes prior to deployment.
• Manage cloud security posture across AWS, including IAM policy hygiene, S3 protections, security group reviews, and CloudTrail/GuardDuty oversight.
• Maintain documentation, support audits, and contribute to security policy development as the environment evolves.

Requirements

• 5+ years in information security or security engineering roles.
• Hands-on experience with EDR/XDR platforms such as CrowdStrike or SentinelOne.
• Practical experience operating enterprise vulnerability scanners (Tenable, Qualys, Rapid7, or comparable).
• Working knowledge of Okta or Azure AD administration and IAM principles.
• Cloud security proficiency in AWS, including IAM, VPC, security groups, CloudTrail, GuardDuty, and Config.
• Familiarity with SIEM platforms (Splunk, Sentinel, Elastic, etc.) for log analysis and detection engineering.
• Solid networking fundamentals spanning firewalls, proxies, DNS security, segmentation, and packet analysis.
• Working knowledge of compliance frameworks such as NIST 800-171, CMMC, SOC 2, or ISO 27001.
• Strong written and verbal communication skills with both engineers and leadership audiences.

Nice to have

• Relevant certifications such as CISSP, GIAC, CEH, or AWS Security Specialty.
• Infrastructure-as-code and CI/CD pipeline security experience using Terraform or CloudFormation.
• Background supporting environments subject to ITAR/EAR export control requirements.

Benefits and work setup

• Salary range: $193,000–$218,000 plus a competitive equity grant and comprehensive benefits.
• Hybrid schedule (three days onsite in San Jose) or fully remote from approved U.S. states.
• Medical, dental, and vision insurance, 401(k), short- and long-term disability, and life insurance.
• Three weeks of paid vacation for new hires, 12 paid holidays, unlimited sick time, and paid parental leave.