Sr. Security Engineer

United States Digital Space LLC; El Segundo (CA); On-site; USD 170,000 - 265,000; Full time

Benefits offered by this job

3 weeks of paid vacation

10+ paid holidays per year

Employee stock/long-term incentives

Job summary

United States Digital Space LLC in El Segundo, CA, is seeking a Sr. Security Engineer to join the Security Operations Center.

You will design, build, and maintain technology solutions that protect company systems, networks, and data, with emphasis on high-criticality and high-risk services. Responsibilities include authentication and identity services, automation and scripting, network and application security controls, cloud deployment policy enforcement, and SME mentorship.

Qualifications

• Bachelor's degree in computer science or another STEM discipline; OR 2+ years of professional experience in security software development in lieu of a degree.
• 5+ years of experience with the Python programming language, GO, C#, or Rust.
• 5+ years of experience designing and implementing security solutions for operating systems, distributed systems, or other enterprise/large-scale infrastructure.

Responsibilities

• Design, build, and maintain technology solutions and systems that provide security for the company systems, networks, and data.
• Authentication and identity services, including multi-factor solutions, network access control identity servers, and related authentication and authorization technologies.
• Identity lifecycle management services and automation. Build and maintain scripts and automation that support the information security mission across the company, to be utilized by information security teammates and other partner organizations.
• Network security systems and the backend infrastructure that powers such services.
• Application level security controls (e.g. web application firewalls).
• Cloud deployments security policy enforcement, centralized configuration management, monitoring, etc.
• Serve as the subject matter expert (SME) for those solutions, maintaining documentation on them and advising others on their underlying technologies and operation.
• Work with security and IT teams to identify threats and problem areas, using that feedback to further strengthen tools and technologies. Materialize this as improvements which result in stronger and safer software and application deployments across the company, measuring in decreased risk and prevalence of issues.
• Create solutions that are scalable, repeatable, maintainable, and secure.
• Work collaboratively with other teams, including individuals in information security, physical security, information technology, human resources, legal, software, and others.]

Skills

Python

Go

C#

Rust

Security architectures

Education

Bachelor's degree in computer science or STEM

Tools

PKI

SAML/OIDC/OAuth

TPM/HSM

Job description

the company was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today the company is actively developing the technologies to make this possible, with the ultimate goal ofenabling human life on Mars.

SR. SECURITY ENGINEER

the company is looking for a Sr. Security Engineer to join the Security Operations Center to help protect and drive the the company mission. Information drives our business and we must protect the confidentiality, integrity, and availability of systems and processes across the enterprise. As a highly visible and dynamic organization, we must also value and guard against damage to our reputation and brand. Finally, it is paramount that we defend against loss of control or confidence in our systems, to guarantee the highest probability of success. This role will focus on the "behind the scenes" technologies that ensure our networks and systems are up to industry and the company standards of information security. It will also focus on providing high-criticality and high-risk services, with the confidentiality, integrity, and availability of those services in mind.

RESPONSIBILITIES:

• Design, build, and maintain technology solutions and systems that provide security for the company systems, networks, and data.
• Authentication and identity services, including multi-factor solutions, network access control identity servers, and related authentication and authorization technologies.
• Identity lifecycle management services and automation. Build and maintain scripts and automation that support the information security mission across the company, to be utilized by information security teammates and other partner organizations.
• Network security systems and the backend infrastructure that powers such services.
• Application level security controls (e.g. web application firewalls).
• Cloud deployments security policy enforcement, centralized configuration management, monitoring, etc.
• Serve as the subject matter expert (SME) for those solutions, maintaining documentation on them and advising others on their underlying technologies and operation.
• Work with security and IT teams to identify threats and problem areas, using that feedback to further strengthen tools and technologies. Materialize this as improvements which result in stronger and safer software and application deployments across the company, measuring in decreased risk and prevalence of issues.
• Create solutions that are scalable, repeatable, maintainable, and secure.
• Work collaboratively with other teams, including individuals in information security, physical security, information technology, human resources, legal, software, and others.

BASIC QUALIFICATIONS:

• Bachelor's degree in computer science or another STEM discipline; OR 2+ years of professional experience in security software development in lieu of a degree.
• 5+ years of experience with the Python programming language, GO, C#, or Rust.
• 5+ years of experience designing and implementing security solutions for operating systems, distributed systems, or other enterprise/large-scale infrastructure.

PREFERRED SKILLS AND EXPERIENCE:

• Experience with secure code development practices.
• Experience with Linux, Windows, and Mac system internals.
• Experience with public key infrastructure (PKI) environments and related technologies.
• Experience with SAML, OIDC, and OAuth.
• Experience working with special purpose security hardware such as Trusted Platform Modules (TPMs) and Hardware Security Modules (HSMs).
• Fundamental understanding of network protocols; including the TCP/IP stack as well as UDP based protocols.
• Experienced in navigating large, complex, interactive systems.
• Familiarity with developing web-based APIs, HTTP-RPC, and REST.
• Familiarity with enterprise security controls and security best practices for Windows, Linux, and Mac systems.
• Effective problem-solving skills, and ability to quickly determine root-causes of issues.
• Familiarity with macOS and Windows code-signing and deployment of enterprise applications.

ADDITIONAL REQUIREMENTS:

• Must be willing to work extended hours and/or weekends as needed.
• This role requires you to be onsite. Hybrid or remote work will not be considered.

COMPENSATION AND BENEFITS:

Pay Range:Level 3: $170,000.00 - $265,000.00

Your actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, and experience.

• long-term incentives, in the form of company stock or long-term cash awards, as well as potential discretionary bonuses and the ability to purchase additional stock at a discount through an Employee Stock Purchase Plan.
• comprehensive medical, vision, and dental coverage
• 401(k) retirement plan
• short and long-term disability insurance
• life insurance
• paid parental leave
• various other discounts and perks
• 3 weeks of paid vacation
• 10 or more paid holidays per year
• paid sick leave pursuant to Company policy which satisfies or exceeds the accrual, carryover, and use requirements of the law.

ITAR REQUIREMENTS:

• To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here.

the company is an Equal Opportunity Employer; employment with the company is governed on the basis of merit, competence and qualifications and will not be influenced in any manner by race, color, religion, gender, national origin/ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability or any other legally protected status.

Applicants wishing to view a copy of the company’s Aff…