Security Engineer (Software)

SpaceX•Bastrop, TX

17h•$130,000 - $195,000•Onsite

About The Position

SpaceX is seeking a Security Engineer (Software) to join Information Security and help protect and advance the company’s mission. The role develops and operates software and infrastructure that support SpaceX security standards and protect the confidentiality, integrity, and availability of enterprise systems and processes. The engineer will build and maintain security technologies, operate identity and network security services, enforce cloud security policies, and work with teams across the company to identify and reduce risk. The position is onsite; hybrid and remote work are not considered.

Requirements

Bachelor's degree in computer science or another STEM discipline, or 2+ years of professional experience in security software development in lieu of a degree.
Experience with Python, Go, C#, C/C++, or Rust.
Experience designing and implementing security solutions for operating systems, distributed systems, or other enterprise / large-scale infrastructure.
Must be willing to work extended hours and/or weekends as needed.
Must be able to pass an Air Force background check for Cape Canaveral.

Nice To Haves

Experience writing, shipping, and operating secure software.
Knowledge of Linux, Windows, and macOS system internals.
Knowledge of public key infrastructure (PKI) and related technologies.
Experience with SAML, OIDC, and OAuth.
Experience with TPMs and HSMs.
TCP/IP and UDP knowledge sufficient to build and debug services.
Ability to navigate large, interactive systems.
Experience with web APIs, HTTP-RPC, and REST.
Experience hardening Windows, Linux, and macOS to enterprise security controls.
Experience with macOS and Windows code-signing and enterprise application deployment.
Root-cause debugging under time pressure.

Responsibilities

Design, build, and maintain technology that protects SpaceX systems, networks, and data.
Stand up authentication and identity services, multi-factor authentication, and network access control identity.
Automate identity lifecycle for Information Security and partner organizations.
Run backend infrastructure that network security services depend on.
Operate web application firewalls and other application-level security controls.
Enforce cloud security policy, centralized configuration, and monitoring.
Document services and infrastructure, keep them working, and advise other teams on them.
Find threats and gaps with security and IT, then ship software and deployment changes that reduce risk.
Deliver scalable, repeatable, maintainable, and secure solutions.
Coordinate with information security, physical security, IT, HR, legal, software, and other partners.

Benefits

Potential eligibility for long-term incentives in the form of company stock or long-term cash awards.
Potential discretionary bonuses.
Ability to purchase additional stock at a discount through an Employee Stock Purchase Plan.
Comprehensive medical, vision, and dental coverage.
Access to a 401(k) retirement plan.
Short- and long-term disability insurance.
Life insurance.
Paid parental leave.
Various other discounts and perks.
May accrue 3 weeks of paid vacation.
Eligible for 10 or more paid holidays per year.
Paid sick leave pursuant to company policy.