Security Engineer

About This Role

This Security Engineer role at SpaceX involves protecting and driving the company's mission by safeguarding the confidentiality, integrity, and availability of systems and processes across the enterprise. The role focuses on designing, building, and maintaining technology that protects SpaceX systems, networks, and data, and requires writing and operating the software and infrastructure behind SpaceX security standards.

Responsibilities

• Design, build, and maintain technology that protects SpaceX systems, networks, and data
• Stand up authentication and identity services, multi-factor authentication, and network access control identity
• Automate identity lifecycle for Information Security and partner organizations
• Run backend infrastructure that network security services depend on
• Operate web application firewalls and other application-level security controls
• Enforce cloud security policy, centralized configuration, and monitoring
• Document what you run, keep it working, and advise other teams on it
• Find threats and gaps with security and IT, then ship software and deployment changes that reduce risk
• Deliver solutions that are scalable, repeatable, maintainable, and secure
• Coordinate with information security, physical security, IT, HR, legal, software, and other partners

Requirements

• Bachelor's degree in computer science or another STEM discipline; OR 2+ years of professional experience in security software development in lieu of a degree
• Experience with Python, Go, C#, C/C++, or Rust
• Experience designing and implementing security solutions for operating systems, distributed systems, or other enterprise / large-scale infrastructure

Nice to have:

• Writing, shipping, and operating secure software
• Linux, Windows, and macOS system internals
• Public key infrastructure (PKI) and related technologies
• SAML, OIDC, and OAuth
• TPMs and HSMs
• TCP/IP and UDP at the level needed to build and debug services
• Navigating large, interactive systems
• Web APIs, HTTP-RPC, and REST
• Hardening Windows, Linux, and macOS to enterprise security controls
• macOS and Windows code-signing and enterprise application deployment
• Root-cause debugging under time pressure

Important Details

• Schedule: extended hours and/or weekends as needed
• Work format: onsite only

Security Clearance

• Ability to pass Air Force background check for Cape Canaveral

ITAR Requirements

• To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State.

About the Company

SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today SpaceX is actively developing the technologies to make this possible, with the ultimate goal of enabling human life on Mars.