Security Engineer (Software)

SpaceX is seeking a Security Engineer (Software) to support Information Security in protecting systems and advancing the SpaceX mission. This role focuses on building and operating security software and infrastructure aligned with SpaceX security standards in an onsite Texas environment.

Role Responsibilities

• Design, build, and maintain technologies that protect SpaceX systems, networks, and data.
• Stand up authentication and identity services, including multi-factor authentication and network access control identity.
• Automate identity lifecycle workflows for Information Security and partner organizations.
• Operate backend infrastructure that network security services depend on.
• Run web application firewalls and other application-level security controls.
• Enforce cloud security policy using centralized configuration and monitoring.
• Document operational processes, maintain system functionality, and advise other teams on the implemented services.
• Identify threats and gaps in collaboration with security and IT, then ship software and deployment changes to reduce risk.
• Deliver solutions that are scalable, repeatable, maintainable, and secure.
• Coordinate with Information Security, physical security, IT, HR, legal, software, and other partners.

Minimum Requirements

• Bachelor’s degree in computer science or another STEM discipline; or 2+ years of professional experience in security software development in lieu of a degree.
• Experience with Python, Go, C#, C/C++, or Rust.
• Experience designing and implementing security solutions for operating systems, distributed systems, or other enterprise and large-scale infrastructure.

Technical Skills and Technologies

• Python, Go, C#, C/C++, Rust
• Linux, Windows, macOS
• Public key infrastructure (PKI)
• SAML, OIDC, OAuth
• TPMs, HSMs
• TCP/IP, UDP
• Web APIs, HTTP-RPC, REST

Preferred Skills and Experience

• Writing, shipping, and operating secure software.
• Linux, Windows, and macOS system internals.
• Public key infrastructure (PKI) and related technologies.
• SAML, OIDC, and OAuth.
• TPMs and HSMs.
• TCP/IP and UDP at the level needed to build and debug services.
• Navigating large, interactive systems.
• Web APIs, HTTP-RPC, and REST.
• Hardening Windows, Linux, and macOS to enterprise security controls.
• macOS and Windows code-signing and enterprise application deployment.
• Root-cause debugging under time pressure.

Additional Requirements

• Willingness to work extended hours and/or weekends as needed.
• Onsite requirement: hybrid or remote work will not be considered.
• Ability to pass an Air Force background check for Cape Canaveral.

ITAR / Export Compliance

To conform to U.S. Government export regulations, the applicant must be: (i) a U.S. citizen or national, (ii) a U.S. lawful, permanent resident (green card holder), (iii) a Refugee under 8 U.S.C. § 1157, or (iv) an Asylee under 8 U.S.C. § 1158, or eligible to obtain required authorizations from the U.S. Department of State.

Location and Compensation

• Location: Texas (onsite)
• Salary: USD 130,000 - 195,000 per yearly
• Minimum Experience: 2 years

Benefits

• Long-term incentives in the form of company stock or long-term cash awards
• Potential discretionary bonuses
• Employee Stock Purchase Plan with ability to purchase additional stock at a discount
• Comprehensive medical, vision, and dental coverage
• 401(k) retirement plan
• Short and long-term disability insurance
• Life insurance
• Paid parental leave
• Paid vacation: 3 weeks
• 10 or more paid holidays per year
• Paid sick leave pursuant to Company policy