Cybersecurity Engineer - Linux

ABOUT FIREFLY AEROSPACE

As an end-to-end responsive space company, Firefly Aerospace is on a mission to enable our world to launch, land, and operate in space – anywhere, anytime. Our small- to medium-lift launch vehicles, lunar landers, and orbital vehicles allow us to service the entire lifecycle of government and commercial missions from low Earth orbit to the Moon and beyond. We utilize carbon composite structures, patented propulsion technologies, and common components across our vehicles to iterate quickly, improve reliability, and deliver payloads at a lower cost.

SUMMARY

As a Cybersecurity Engineer at Firefly, you will be responsible for designing, implementing, and maintaining robust security measures across our Unix-based systems, cloud infrastructures, containerized environments, and APIs. Your primary focus will be on enhancing the security posture of our Unix environments, ensuring the integrity and confidentiality of our cloud services, securing our Kubernetes and containerization platforms, and developing automated solutions to streamline security operations. You will collaborate closely with cross-functional teams to safeguard our data and systems against cyber threats, ensuring compliance with industry standards and regulations.?

RESPONSIBILITIES

• Unix Security Management:
  • Develop, implement, and maintain security policies and procedures for Unix-based systems, ensuring alignment with compliance standards such as ISO 27001, SOC 2, PCI-DSS, and NIST?
  • Conduct regular security assessments and vulnerability scans on Unix systems, implementing necessary patches and configurations to mitigate risks?
  • Monitor Security tools, and Unix system logs for suspicious activities, analyze security incidents, and respond promptly to mitigate potential threats
• Cloud Security:
  • Design, configure, and manage security measures within our cloud environments (e.g., AWS, Azure), including identity and access management, network security, and data protection strategies?
  • Implement and maintain cloud security best practices, ensuring compliance with relevant regulations and standards?
  • Collaborate with cloud service providers to assess and integrate new security features and services?
• Kubernetes and Containerization Security:
  • Secure Kubernetes clusters by implementing best practices, including role-based access control (RBAC), network policies, and pod security standards?
  • Manage and secure containerized applications using platforms like Docker and Kubernetes, ensuring the integrity and security of container images and registries?
  • Monitor and address vulnerabilities within container environments, implementing necessary patches and configurations?
• API Security:
  • Develop and enforce security standards for APIs, ensuring secure authentication, authorization, and data validation mechanisms?
  • Conduct regular security assessments of APIs to identify and mitigate potential vulnerabilities?