Principal Security Software Engineer (Blue Team)

SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today SpaceX is actively developing the technologies to make this possible, with the ultimate goal of enabling human life on Mars.

PRINCIPAL SECURITY SOFTWARE ENGINEER (BLUE TEAM)

SpaceX is hiring a principal security engineer to help protect and drive the SpaceX mission. Our engineers are responsible for building innovative security solutions to protect against threats to our rockets, spacecraft, and our global satellite internet constellation, Starlink.  As a highly visible and dynamic organization, we must value and guard against damage to our internal information, our physical hardware, and our reputation and brand. It is paramount that we defend against loss of control or confidence in our systems, to guarantee the highest probability of success.

As a Principal Security Engineer, you will focus on the "behind the scenes" technologies that ensure our networks and systems are up to industry and SpaceX standards. You will be responsible for providing high-criticality and high-risk services, with the confidentiality, integrity, and availability of those services in mind. This role will partner with various application development and customer groups across SpaceX to ensure that the technologies and systems we build in-house or purchase and deploy in-house are designed and maintained in a secure way that minimizes risk.

RESPONSIBILITIES:

• Design, build, and maintain technology solutions and systems that provide security for SpaceX systems, networks, and data. This can include:
  • Authentication and identity services, including multi-factor solutions, network access control identity servers, and related authentication and authorization technologies.
  • Identity lifecycle management services and automation. Build and maintain scripts and automation that support the information security mission across SpaceX, to be utilized by information security teammates and other partner organizations.
  • Network security systems and the backend infrastructure that powers such services.
  • Application level security controls (e.g. web application firewalls).
  • Cloud deployments security policy enforcement, centralized configuration management, monitoring, etc.
  • Serve as the subject matter expert (SME) for those solutions, maintaining documentation on them and advising others on their underlying technologies and operation.
  • Work with security and IT teams to identify threats and problem areas, using that feedback to further strengthen tools and technologies. Materialize this as improvements which result in stronger and safer software and application deployments across SpaceX, measuring in decreased risk and prevalence of issues.
  • Create solutions that are scalable, repeatable, maintainable, and secure.
  • Work collaboratively with other teams, including individuals in information security, physical security, information technology, human resources, legal, software, and others.

BASIC QUALIFICATIONS:

• Development experience in any modern programming language (including but not limited to Python, C++, Rust, Go)
• Experience developing security architectures and primitives (i.e. TLS, Zero-Trust)
• 8+ years of professional experience in security engineering with a bachelor's degree in security engineering, cyber security, computer science, engineering, math, or other STEM discipline; OR 10+ years of professional experience in security engineering in lieu of a degree

PREFERRED SKILLS AND EXPERIENCE:

• Experience building automation between tools and systems
• Experience performing analytics against aggregated log data, and building configurations to parse and handle log data from systems and tools
• Familiarity with enterprise security controls and security best practices for Windows, Linux, and Mac systems
• Familiarity with cloud security services, concepts, and best practices
• Strong familiarity with software development lifecycle (SDLC) processes and source control technologies
• Track record of getting things done quickly and with quality
• Demonstrated ability to operate in a dynamic, evolving environment
• Ethical character and uncompromised integrity

ADDITIONAL REQUIREMENTS:

• Willingness to work extended hours and weekends as needed

COMPENSATION AND BENEFITS:

Pay range:           Principal Security Engineer/Principal: $220,500.00 - $270,000.00/per year            

Your actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related