Platform - Security Automation Engineer

Intuitive Machines•Palo Alto, CA

1d•$102,000 - $195,000

About The Position

Lanteris Space LLC, a wholly owned subsidiary of Intuitive Machines, is hiring a Security Automation Engineer to design, implement, and maintain security controls and automation across platform infrastructure. The role may be based in the Palo Alto, California office or performed remotely within the United States. The engineer will work with Cilium and Tetragon for runtime security, Kyverno for policy enforcement, and Wiz for cloud security posture management, while implementing vulnerability management and software supply-chain security practices. As part of the platform team, the Security Automation Engineer will enforce security policies in Kubernetes environments, automate security controls, support CMMC Level 2 and ITAR compliance, manage vulnerability remediation workflows, and protect the software supply chain supporting spacecraft development and mission operations. The role includes collaborating with development teams, monitoring security tools, conducting assessments, maintaining documentation, and participating in incident response.

Requirements

Be a U.S. citizen or permanent resident.
Bachelor's degree in Computer Science, Cybersecurity, or a related discipline, or four additional years of experience in place of a degree.
At least 5 years of relevant industry experience in security engineering or DevSecOps.
Experience with Kubernetes security, including network policies, pod security standards, and admission controllers.
Experience with at least two of Cilium/Tetragon, Kyverno, or similar policy and security enforcement tools.
Experience with vulnerability management tools and processes, including scanning, assessment, and remediation tracking.
Experience implementing security controls in CI/CD pipelines.
Experience with container security best practices.
Experience with cloud security in AWS environments.
Scripting and automation skills in Python, Bash, or Go.
Understanding of compliance frameworks such as CMMC or NIST 800-171, or similar frameworks.

Nice To Haves

Security certifications such as CISSP, CCSP, CKS, or CEH.
Experience with Wiz or similar cloud security posture management platforms.
Experience with Cilium for Kubernetes networking and Tetragon for runtime security enforcement.
Experience with Kyverno or OPA for policy-as-code.
Experience implementing software supply-chain security, including SLSA, Sigstore, or similar.
Experience with container image scanning tools such as Trivy, Black Duck, Snyk, or Aqua.
Experience in aerospace, defense, or government sectors with ITAR or CUI environments.
Experience implementing CMMC Level 2 or FedRAMP security controls.
Experience with eBPF-based security tools and observability.
Experience with SBOM generation and analysis.
Kubernetes certifications such as CKA, CKAD, or CKS.
Experience with GitOps security practices such as ArgoCD or Flux.
Experience with AWS security services such as GuardDuty, Security Hub, Inspector, or Config.
Experience with observability and SIEM tools such as Grafana, Splunk, or Cribl.
Experience with zero-trust architecture and micro-segmentation.
Experience with security automation frameworks and orchestration.

Responsibilities

Design and implement runtime security controls using Cilium network policies and Tetragon eBPF-based security observability and enforcement.
Develop and maintain Kyverno policies for Kubernetes admission control, resource validation, and security policy enforcement.
Configure and manage Wiz for cloud security posture management, vulnerability scanning, and compliance monitoring across AWS environments.
Implement and maintain vulnerability management programs, including scanning, prioritization, remediation tracking, and reporting.
Design and enforce software supply-chain security controls, including container image signing, SBOM generation, and artifact verification.
Automate security workflows for vulnerability remediation, policy enforcement, and compliance reporting.
Monitor security events and alerts from Cilium, Tetragon, Wiz, and other security tools.
Collaborate with development teams to integrate security controls into CI/CD pipelines.
Ensure compliance with CMMC Level 2, ITAR, and NIST 800-171 security requirements.
Conduct infrastructure and application security assessments and provide remediation guidance.
Create and maintain security documentation, including runbooks, policies, and incident response procedures.
Participate in security incident response and post-incident analysis.