A thriving economy in space is needed to make life on Earth more vibrant, sustainable, and equitable. Space technology will enable global access to information, solutions to climate change, answers to global food security, products that transform healthcare, clean energy production, and more. Today, rocket launch options are slow, expensive, and unreliable. Stoke is building the world’s most efficient fully and rapidly reusable rocket designed to fly daily that will radically increase access to space and open up the space economy to safeguard our precious home, Earth.
Description
Reusable launch systems are the key to seamlessly connecting Earth and space. Security and compliance with applicable frameworks are foundational to these efforts.
As the Information Systems Security Manager in Stoke Space’s Information Technology department, you’ll be the person ensuring that our information security posture meets our rapidly growing needs and achieves our compliance obligations while facilitating a successful startup culture as we race towards our first launch of Nova.
We are a small and motivated team, and you will work across the entire Stoke organization and across product teams to support secure systems operations, develop SSPs, deploy security controls and ensure compliance with NIST frameworks (800-53, 800-171) facilitating compliance objectives such as ITAR data protection, FedRamp Moderate readiness, CMMC compliance, SOC1/SOC2 certifications.
You must be ready to stay focused, move fast, self-direct, and learn on the fly.
Qualifications
- Exceptional understanding of IT infrastructure, including networks, servers, storage, and cloud technologies
- Strong analytical and problem-solving skills to identify, address, and mitigate security risks and issues
- Bachelor’s degree in Computer Science, Information Technology Management or related field
- 5+ years of experience in information security field
- Ability to lead
- Ability to follow
- Excellent written and verbal communication
Preferred Qualifications
- Advanced certifications such as CISSP, CISM, or CEH
- Prior experience working in a startup environment, demonstrating adaptability, resourcefulness, and a hands-on approach to security management
- Experience in establishing and managing cybersecurity teams and implementing security best practices, frameworks, standards, and regulations
Responsibilities
- Develop, implement, and enforce comprehensive cyber security strategies, policies, standards, and processes
- Own all System Security Plans for Stoke environments
- Monitor and analyze security systems and alerts to identify suspicious activities and respond to potential threats
- Develop, document, and enhance incident response protocols
- Lead and oversee all aspects of incident response efforts, including investigation, containment, and remediation
- Conduct regular security audits and vulnerability assessments to identify and mitigate potential risks
- Ensure organizational compliance with relevant regulations, standards, and frameworks
- Provide support to end users by investigating and addressing security incidents, including phishing attempts, malicious files, and other threats
- Stay up-to-date on emerging cybersecurity trends, threats, vulnerabilities, and regulatory changes to strengthen proactive defenses
- Promote a culture of collaboration, empowerment, and teamwork within the organization and with external partners and customers
- Assist with hands-on system administration tasks, particularly those related to security configurations
- Perform additional duties as assigned to support organizational goals and objectives
Benefits
- Medical, dental, vision and basic life insurance
- 401(k) match
- Paid time off
- Flexible scheduling
- Equity
Compensation
Target Levels:
- Level 3 range: $127,200 – $190,800
- Level 4 range: $152,600 – $229,000
Our job posts are intentionally written to attract a wide variety of experience levels, and we make decisions about the right fit on a per-candidate basis.
Your actual level and base salary will be decided based on your specific experience and skill level.
To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR), you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State.
Equal Opportunity
The Company is an Equal Opportunity Employer, including with respect to disability and veteran status. It is committed to compliance with all equal opportunity laws, including the Immigration and Nationality Act (INA) and Title VII. It does not discriminate on the basis of nationality, race, citizenship, immigration status, or any other protected class when it comes to employment practices, including hiring.
Employment at the Company is contingent upon satisfactory completion of reference and background checks, and on your ability to prove your identity and authorization to work in the U.S. for the Company. Employees must comply with the United States Citizenship and Immigration Services employment verification requirements, and, therefore, they must complete an Employment Eligibility Verification Form I-9 at the start of employment and re-verify authorization to work periodically.
Separate from this I-9 process, this position entails access to certain technology and technical data that is restricted under U.S. export control laws and regulations. Employment or continued employment may be conditioned on your legal authorization to work with or have access to export control materials as necessary to perform your job.
