Security Engineer (Security Operations)

SpaceX is targeted by sophisticated adversaries determined to disrupt or obtain the cutting-edge technology it develops. SpaceX is hiring a security engineer to join the security operations team to build the capabilities needed to detect and respond to these adversaries. The environment in which you will operate is used to launch rockets and control spacecraft. You will be tasked with developing the tooling and data delivery mechanisms the security operations team will use to catch these threat actors in this environment before they can disrupt or deny SpaceX’s mission. 

Your output will be developing solutions to address visibility gaps while bolstering the resilience of internally developed tooling to ensure maximum uptime for detecting threats. Your work may involve creating automation workflows to drive down time to triage security detections, developing a service to pull in new datasets or enrich existing ones, and finally helping the SOC respond and address visibility gaps from an incident. If you are interested in detecting and disrupting sophisticated threat actors in order to secure SpaceX’s mission to Mars, let’s talk! 

• →Build and improve existing security detection mechanisms and automation frameworks that directly drive what the Security Operations Center.
• →Engage with relevant owners of high-risk systems and services to identify and prioritize detection gaps.
• →Investigate anomalous or suspicious behavior in the environment as it is identified in the detection engineering process. 
• →Participate in adversary emulation activities to identify detection gaps in the environment.

• 2+ years of professional experience in incident response, security operations, or security engineering role in lieu of a degree; OR a bachelor’s degree in security engineering, computer science, cyber security, engineering, math, or other STEM discipline.
• Experience with any modern programming language (including but not limited to Python, Go, C++, Rust).

• Experience performing Incident Response related tasks or being a part of a role directly contributing to a CSIRT team.
• Experience building Extract, Transform, and Load (ETL) pipelines from diverse systems to optimize logging formats for threat detection.
• Demonstrated ability to support and manage services in a Kubernetes (k8s) environment, ensuring high availability and reliability through monitoring, alerting, and infrastructure automation.
• Knowledge of traditional Security Operations environments and response procedures, including modern security information and event management (SIEM) systems.
• Knowledge of common attack trends or techniques, and the evidence sources needed to investigate.
• Familiarity with enterprise security controls and best practices for Windows, Linux, and/or macOS systems.

• Must be able to work extended hours and weekends as needed.

• To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here.  

SpaceX is an Equal Opportunity Employer; employment with SpaceX is governed on the basis of merit, competence and qualifications and will not be influenced in any manner by race, color, religion, gender, national origin/ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability or any other legally protected status.

Applicants wishing to view a copy of SpaceX’s Affirmative Action Plan for veterans and individuals with disabilities, or applicants requiring reasonable accommodation to the application/interview process should reach out to [email protected].