Security Engineer

SpaceX•Bastrop, TX

11d•Onsite

About The Position

SpaceX is seeking a Security Engineer to join Information Security and help protect and advance the company’s mission. The role helps safeguard the confidentiality, integrity, and availability of enterprise systems and processes, and writes and operates the software and infrastructure that support SpaceX security standards. The position is onsite; hybrid and remote work are not considered.

Requirements

Bachelor's degree in computer science or another STEM discipline, or 2+ years of professional experience in security software development in lieu of a degree.
Experience with Python, Go, C#, C/C++, or Rust.
Experience designing and implementing security solutions for operating systems, distributed systems, or other enterprise or large-scale infrastructure.
Willingness to work extended hours and/or weekends as needed.
Ability to pass an Air Force background check for Cape Canaveral.
Must meet U.S. Government export-control eligibility requirements, or be eligible to obtain the required authorizations from the U.S. Department of State.

Nice To Haves

Experience writing, shipping, and operating secure software.
Knowledge of Linux, Windows, and macOS system internals.
Knowledge of public key infrastructure (PKI) and related technologies.
Experience with SAML, OIDC, and OAuth.
Knowledge of TPMs and HSMs.
TCP/IP and UDP knowledge sufficient to build and debug services.
Ability to navigate large, interactive systems.
Experience with web APIs, HTTP-RPC, and REST.
Experience hardening Windows, Linux, and macOS to enterprise security controls.
Experience with macOS and Windows code-signing and enterprise application deployment.
Root-cause debugging under time pressure.

Responsibilities

Design, build, and maintain technology that protects SpaceX systems, networks, and data.
Stand up authentication and identity services, multi-factor authentication, and network access control identity.
Automate identity lifecycle for Information Security and partner organizations.
Run backend infrastructure that network security services depend on.
Operate web application firewalls and other application-level security controls.
Enforce cloud security policy, centralized configuration, and monitoring.
Document systems and services, maintain their operation, and advise other teams.
Identify threats and gaps with security and IT, then deliver software and deployment changes that reduce risk.
Deliver scalable, repeatable, maintainable, and secure solutions.
Coordinate with information security, physical security, IT, HR, legal, software, and other partners.