Information Security Systems Engineer

Stoke Space • Kent, WA

1d • $133,560 - $240,450

About The Position

Stoke is building Nova, a fully and rapidly reusable launch vehicle intended to make space transportation more affordable, available, and reliable. The Information Security Systems Engineer designs, implements, documents, and continually improves technical security controls that protect Stoke’s infrastructure, engineering environments, manufacturing systems, and sensitive aerospace data.

This hands-on role owns and advances Stoke’s evolving information security program. The engineer strengthens technical controls, drives risk management and framework alignment, and translates regulatory requirements—including NIST 800-53/171, FedRAMP, ISO 27001, and SOC frameworks—into practical, scalable controls. The role also maintains documentation and evidence for audits and compliance activities.

Working with IT, software engineering, manufacturing, and operations, the engineer implements security guardrails that support teams’ work while managing risk. The position calls for someone who can stay focused, move quickly, work independently, and learn on the fly.

Requirements

• Exceptional understanding of IT infrastructure, including applications, networks, servers, storage, and cloud technologies.
• Strong analytical and problem-solving skills to identify, address, and mitigate security risks and issues.
• Bachelor’s degree in Computer Science, Cybersecurity, or a related field.
• At least 5 years of experience in the Information Security field.
• Knowledge of relevant frameworks, such as NIST 800-53/171, SOC 2, and ISO 27001.
• Excellent written and verbal communication skills.

Nice To Haves

• Professional security certifications such as CISSP, GCED, or GCIH, or equivalent demonstrated practical experience.
• Experience operating in regulated environments subject to NIST 800-171, NIST 800-53, FedRAMP, ISO 27001, SOC 2, CUI handling, or similar control frameworks.
• Experience integrating security into software development lifecycles, including threat modeling, secure code review practices, CI/CD security controls, and vulnerability remediation workflows.
• Experience in regulated environments subject to strict data protection or government-driven security requirements.
• Prior startup experience demonstrating adaptability, resourcefulness, and a hands-on approach to security management.

Responsibilities

• Lead and facilitate information security risk assessments, including identifying, evaluating, and treating risks.
• Define, document, and enforce security policies, standards, and procedures aligned with regulatory and industry standards, including NIST 800-53/171, SOC 1/SOC 2, and ISO 27001.
• Design, implement, and continuously improve security controls across cloud and on-premises systems, including identity, endpoint, network, and logging environments.
• Monitor and analyze security systems and alerts to identify suspicious activity and respond to potential threats.
• Conduct regular security audits and vulnerability assessments to identify and mitigate potential risks.
• Collaborate with cross-functional teams to integrate security controls into business processes, IT systems, and engineering development.
• Maintain and improve documentation and evidence required for audits and compliance activities.
• Assist with hands-on system administration, particularly security configurations.
• Perform additional duties as assigned to support organizational goals and objectives.

Benefits

• Equity in the form of stock options for regular, full-time employees.
• Comprehensive benefits program, including subsidized medical, dental, and vision insurance.
• Company-paid life and disability insurance.
• 401(k) plan with employer match.
• 4 weeks of paid time off.
• 11 holidays, including an end-of-year closure.
• Paid family/parental leave.
• On-site gym or monthly wellness stipend, depending on location.
• Dog-friendly offices.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level