Sr. Cyber Assurance Analyst, Starlink

SPACE EXPLORATION TECHNOLOGIES CORP; Redmond (WA); On-site; USD 130,000 - 180,000; Full time

Benefits offered by this job

Comprehensive medical coverage

401(k) retirement plan

Paid vacation and holidays

Company stock purchase plan

Job summary

SPACE EXPLORATION TECHNOLOGIES CORP is seeking a Sr. Cyber Assurance Analyst for the STARLINK program in Redmond, WA. This role involves leading security audits, validating compliance with security standards, and managing risk assessments for systems.

The ideal candidate has over 5 years of experience in technical security roles and strong knowledge of cybersecurity compliance frameworks. This role requires a firm commitment to security practices and will not consider remote/hybrid work arrangements.

Benefits include a competitive salary range of $130,000 - $180,000, comprehensive medical coverage, and stock options.

Qualifications

• 5+ years of experience in cybersecurity compliance and audit roles.
• Proven experience with control testing and security audits.
• Experience with security standards and risk management is essential.

Responsibilities

• Lead security audits and certification efforts for ISO 27001, NIST, etc.
• Gather and validate technical evidence with engineers.
• Perform technical security and risk assessments of systems.

Skills

Cybersecurity compliance expertise

Security frameworks knowledge

Technical security role experience

Education

High school diploma or equivalency certificate

Tools

Vulnerability scanners

SIEMs

CIS Benchmarks

Job description

SpaceX was founded under the belief that a future where humanity is exploring the stars is fundamentally more exciting than one where we are not. Today SpaceX is actively developing the technologies to make this possible, with the ultimate goal of enabling human life on Mars.

SR. CYBER ASSURANCE ANALYST, STARLINK

Cyber Assurance is the practice of providing confidence that systems, products and processes meet security, regulatory and compliance obligations. It bridges governance with technical execution – validating that controls are in place, risks are managed, and requirements are met for both internal and customer-facing systems.

As a teammate you will operate within Information Assurance, working closely with engineers to understand systems, how controls are implemented, be hands‑on with collecting and reviewing evidence, and driving efficiencies and remediation efforts, along with providing technical certification support for Starlink products in line with required international standards.

As an ideal candidate, you love living at the intersection of security, compliance, and emerging technology. You thrive on rolling up your sleeves to dig into configs, logs, and making sense of challenging, complex, or ambiguous requirements. You’re comfortable explaining security frameworks and security best practices to non-technical teams as you are at grabbing a hash of a file or identifying an insecure default configuration. You are firm when it matters, but also flexible to consider alternative ways to move the ball forward. You excel at handling concurrent complex efforts and flourish in an environment where learning never ceases, where the breadth of operations ranges from rockets to routing tables, and where teams are laser-focused on mission accomplishment – excitement guaranteed!

RESPONSIBILITIES

• Lead and support security audits and certification (ISO 27001, NIST, PCI, etc.) efforts.
• Partner with engineers to gather and validate technical evidence (configs, code snippets, logs, system designs, etc.).
• Support product security certification efforts (e.g. telecom, CPE, or country-specific regulatory requirements).
• Perform technical security and risk assessments of systems and networks within our environment and identify where they deviate from security policy, standards or regulations.
• Identify security control and compliance gaps, advise on remediation, and drive timely resolution with engineers.
• Maintain necessary documentation of controls, processes and audits.
• Identify and drive assessments and audit efficiency through system integration, data utilization, and process improvement.
• Support third‑party risk management efforts including supplier onboarding and periodic cyber assessments.
• Identify and propose business enabling actions by maintaining an up-to-date understanding of emerging trends in information security risks, changes in standards, and new compliance/assurance techniques and trends.
• Mentor fellow teammates and take an active role in their development.

BASIC QUALIFICATIONS

• High school diploma or equivalency certificate.
• 5+ years of experience in cybersecurity compliance, audit or technical security roles with strong knowledge in security compliance frameworks.
• 5+ years of experience with control testing, security standards/policy development, security audits, or security risk management.

PREFERRED SKILLS AND EXPERIENCE

• Ability to interpret code/configurations and analyze system/network designs for compliance implications.
• Experience with security tooling such as vulnerability scanners, SIEMs, container security, system configuration baseline checks (e.g. CIS Benchmarks, STIGs, etc.).
• Hands‑on experience supporting product‑level security testing or certifications (e.g. Consumer Premise Equipment/ CPE devices, network equipment).
• Knowledge of other U.S. and international regulatory requirements (e.g. EU NIS2, EU RED, UK PTSI, GDPR, SOX, SOC 1/2, etc.).
• Experience evaluating third‑party risk, communicating with external stakeholders, and supporting appropriate mitigations.
• Strong communication skills across all organizational levels and ability to build cross‑organizational coalitions.
• Direct experience with external audits, regulatory compliance reviews and examinations.
• Project and program management experience, tooling integration, and delivery in highly fluid environments.
• Professional certifications such as CISA, CISM, CISSP, GSNA, ISO 27001 auditor, PCI ISA or QSA, or equivalent certifications.

ADDITIONAL REQUIREMENTS

• Must be willing to travel ≤ 25% domestically and internationally in support of audit and other assurance activities.
• Must be willing to work extended hours and/or weekends as needed.
• This role requires you to be onsite; remote/hybrid work will not be considered.

COMPENSATION AND BENEFITS

Pay Range: Level 3: $130,000.00 - $180,000.00

Your actual level and base salary will be determined on a case‑by‑case basis and may vary based on the following considerations: job‑related knowledge and skills, education, and experience.

Base salary is just one part of your total rewards package at SpaceX. You may also be eligible for long‑term incentives, in the form of company stock or long‑term cash awards, as well as potential discretionary bonuses and the ability to purchase additional stock at a discount through an Employee Stock Purchase Plan. You will also receive access to comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short and long‑term disability insurance, life insurance, paid parental leave, and various other discounts and perks. You may also accrue 3 weeks of paid vacation and will be eligible for 10 or more paid holidays per year. Employees in Washington State accrue paid sick time in compliance with state and federal law. Company shuttles are offered to employees for roundtrip travel from select Seattle locations to the SpaceX Redmond office Monday to Friday.

To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) refugee under 8 U.S.C. § 1157, or (iv) asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about ITAR here.

SpaceX is an Equal Opportunity Employer; employment with SpaceX is governed on the basis of merit, competence and qualifications and will not be influenced in any manner by race, color, religion, gender, national origin/ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability or any other legally protected status.

Applicants who require reasonable accommodation in the application/interview process should contact [e-mail].