Cybersecurity Engineer II

Firefly Aerospace•Cedar Park, TX

About The Position

As a Cybersecurity Engineer II at Firefly Aerospace, you will design, implement, and maintain security measures across Linux and macOS environments. You will own the security posture of the Unix-based endpoint and server fleet by hardening configurations, managing vulnerabilities, and responding to threats, while extending secure practices to cloud infrastructure and containerized environments. You will collaborate with cross-functional teams to protect data and systems from cyber threats and support compliance with industry standards and regulations.

Requirements

Bachelor's degree in Computer Science, Information Security, or a related field.
At least 2 years of information security engineering experience, with a strong demonstrated focus on Linux and macOS security.
Proficiency in Linux/Unix/macOS operating systems, including security configurations, hardening, and best practices.
Working knowledge of Kubernetes and container orchestration platforms, including security best practices.
Excellent problem-solving skills and attention to detail.
Ability to work independently and collaboratively.

Nice To Haves

Certifications such as CISSP, AWS Certified Security – Specialty, Certified Kubernetes Security Specialist (CKS), or similar.
Experience with compliance frameworks such as NIST, ISO 27001, SOC 2, and PCI-DSS.
Experience with cloud platforms such as AWS or Azure, including their security services and configurations.
Familiarity with configuration management tools such as Ansible, Terraform, or Chef, and infrastructure as code practices.
Experience with containerization technologies such as Docker and Kubernetes and their security considerations.
Experience with SIEM monitoring tools and incident response processes.
Strong understanding of networking concepts, protocols, and security measures.
Knowledge of DevSecOps practices and integrating security into CI/CD pipelines.

Responsibilities

Develop, implement, and maintain security policies and procedures for Linux and macOS systems aligned with standards such as ISO 27001, SOC 2, PCI-DSS, and NIST.
Conduct security assessments and vulnerability scans across Linux and macOS endpoints and servers, and implement patches and hardened configurations.
Monitor security tools and Linux/macOS system logs for suspicious activity; analyze incidents and respond to contain and remediate threats.
Manage endpoint protection, device compliance, and configuration baselines across the Linux and macOS fleet.
Secure Kubernetes clusters using practices including RBAC, network policies, and pod security standards.
Manage the security of containerized applications, including Docker and Kubernetes, and ensure the integrity of container images and registries.
Monitor and remediate vulnerabilities in container environments.
Monitor security tools and systems for alerts and events, and investigate and respond to incidents.
Develop and maintain incident response plans and playbooks, and conduct regular drills.
Coordinate with internal and external stakeholders during incident response.
Maintain documentation of security policies, procedures, and configurations, with emphasis on Linux/macOS environments.
Support security audits and assessments by providing documentation and evidence.
Stay current on emerging threats, technologies, and regulatory requirements and adapt security strategies accordingly.