Firefly Aerospace offers generous health, dental and vision plans with low plan deductibles, along with parental leave, relocation benefits, educational reimbursement, short term disability, and flexible PTO options.
Responsibilities
You will design, implement, and maintain security measures across Linux and macOS environments, extending secure practices into cloud infrastructure and containerized environments. This role includes ownership of the security posture for the Unix-based endpoint and server fleet, covering hardening, vulnerability management, threat response, compliance, and documentation.
- Develop, implement, and maintain security policies and procedures for Linux and macOS systems aligned with ISO 27001, SOC 2, PCI-DSS, and NIST.
- Perform regular security assessments and vulnerability scans across Linux and macOS endpoints and servers, applying patches and hardened configurations.
- Monitor security tooling and Linux/macOS logs for suspicious activity; analyze security incidents and respond promptly to contain and remediate threats.
- Manage endpoint protection, device compliance, and configuration baselines for the Linux and macOS fleet.
- Secure Kubernetes clusters using best practices such as RBAC, network policies, and pod security standards.
- Secure containerized applications using Docker and Kubernetes, ensuring integrity of container images and registries.
- Monitor and remediate vulnerabilities within container environments.
- Monitor security tools and systems for alerts and events; investigate and respond to incidents.
- Develop and maintain incident response plans and playbooks, including regular drills.
- Coordinate with internal and external stakeholders during incident response.
- Maintain comprehensive documentation of security policies, procedures, and configurations with emphasis on Linux/macOS environments.
- Support security audits and assessments by preparing necessary documentation and evidence.
- Stay current on emerging threats, technologies, and regulatory requirements, adapting security strategies accordingly.
Requirements
- Bachelor’s degree in Computer Science, Information Security, or a related field.
- 2+ years of experience in information security engineering with a strong focus on Linux and macOS security.
- Proficiency in Linux/Unix/macOS operating systems, including security configuration, hardening, and best practices.
- Working knowledge of Kubernetes and container orchestration platforms and their security best practices.
- Excellent problem-solving skills, attention to detail, and the ability to work independently and collaboratively.
Technologies
- Linux, macOS, Linux/Unix
- Kubernetes, Docker
- RBAC, network policies, pod security standards
- Container images, container registries
- ISO 27001, SOC 2, PCI-DSS, NIST
- SIEM
Desired
- Certifications such as CISSP, AWS Certified Security – Specialty, CKS, or similar.
- Experience with compliance frameworks including NIST, ISO 27001, SOC 2, and PCI-DSS.
- Experience with cloud platforms (e.g., AWS, Azure) including security services and configurations.
- Familiarity with configuration management tools (e.g., Ansible, Terraform, Chef) and infrastructure as code practices.
- Experience with containerization technologies (e.g., Docker, Kubernetes) and their security considerations.
- Experience with SIEM monitoring tools and incident response processes.
- Strong understanding of networking concepts, protocols, and security measures.
- Knowledge of DevSecOps practices and integrating security into CI/CD pipelines.
Eligibility (ITAR)
To conform to U.S. Government Space Technology export regulations, including the International Traffic in Arms Regulations (ITAR): you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State.
Location: Leander, TX (onsite)
