Security Engineer

About the role

SpaceX is looking for a Security Engineer to join Information Security to help protect and drive the SpaceX mission.

Information drives our business. We must protect the confidentiality, integrity, and availability of systems and processes across the enterprise, and defend against loss of control or confidence in our systems. This role writes and operates the software and infrastructure behind SpaceX security standards.

Responsibilities

• Design, build, and maintain technology that protects SpaceX systems, networks, and data.
• Stand up authentication and identity services, multi-factor authentication, and network access control identity.
• Automate identity lifecycle for Information Security and partner organizations.
• Run backend infrastructure that network security services depend on.
• Operate web application firewalls and other application-level security controls.
• Enforce cloud security policy, centralized configuration, and monitoring.
• Document what you run, keep it working, and advise other teams on it.
• Find threats and gaps with security and IT, then ship software and deployment changes that reduce risk.
• Deliver solutions that are scalable, repeatable, maintainable, and secure.
• Coordinate with information security, physical security, IT, HR, legal, software, and other partners.

Basic Qualifications

• Bachelor's degree in computer science or another STEM discipline; OR 2+ years of professional experience in security software development in lieu of a degree.
• Experience with Python, Go, C#, C/C++, or Rust.
• Experience designing and implementing security solutions for operating systems, distributed systems, or other enterprise / large-scale infrastructure.

Preferred Skills and Experience

• Writing, shipping, and operating secure software.
• Linux, Windows, and macOS system internals.
• Public key infrastructure (PKI) and related technologies.
• SAML, OIDC, and OAuth.
• TPMs and HSMs.
• TCP/IP and UDP at the level needed to build and debug services.
• Navigating large, interactive systems.
• Web APIs, HTTP-RPC, and REST.
• Hardening Windows, Linux, and macOS to enterprise security controls.
• macOS and Windows code-signing and enterprise application deployment.
• Root-cause debugging under time pressure.

Additional Requirements

• Must be willing to work extended hours and/or weekends as needed.
• This role requires you to be onsite. Hybrid or remote work will not be considered.
• Ability to pass Air Force background check for Cape Canaveral.

Pay Range

Level 1: $130,000 - $155,000

Level 2: $150,000 - $195,000

Your actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, and experience.

Base salary is just one part of your total rewards package at SpaceX. You may also be eligible for long-term incentives, in the form of company stock or long-term cash awards, as well as potential discretionary bonuses and the ability to purchase additional stock at a discount through an Employee Stock Purchase Plan.

You will also receive access to comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short and long-term disability insurance, life insurance, paid parental leave, and various other discounts and perks. You may also accrue 3 weeks of paid vacation and will be eligible for 10 or more paid holidays per year.

Employees accrue paid sick leave pursuant to Company policy which satisfies or exceeds the accrual, carryover, and use requirements of the law.

Itar Requirements

• To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here.