Principal Security Software Engineer (Blue Team)

PRINCIPAL SECURITY SOFTWARE ENGINEER (BLUE TEAM)

SpaceX is hiring a principal security software engineer onto the blue team to help protect and drive the SpaceX mission. Our engineers are responsible for building innovative security solutions to protect against threats to our rockets, spacecraft, and our global satellite internet constellation, Starlink.  As a highly visible and dynamic organization, we must value and guard against damage to our internal information, our physical hardware, and our reputation and brand. It is paramount that we defend against loss of control or confidence in our systems, to guarantee the highest probability of success.

As a Principal Security Software Engineer, you will focus on the “behind the scenes” technologies that ensure our networks and systems are up to industry and SpaceX standards. You will be responsible for providing high-criticality and high-risk services, with the confidentiality, integrity, and availability of those services in mind. This role will partner with various application development and customer groups across SpaceX to ensure that the technologies and systems we build in-house or purchase and deploy in-house are designed and maintained in a secure way that minimizes risk.

RESPONSIBILITIES:

• Design, build, and maintain technology solutions and systems that provide security for SpaceX systems, networks, and data. This can include:

• Authentication and identity related areas, including cryptographic primitives, trusted platform modules, and secure/trusted boot.
• Identity and machine lifecycle management services and automation. Build and maintain scripts and automation that support strong relationships between systems and their work roles, automated provisioning of systems, and establishing known running state.
• Network security systems and the backend infrastructure that powers such services.
• Application level security controls (e.g. web application firewalls).
• Cloud deployments security policy enforcement, centralized configuration management, monitoring, etc.
• Serve as the subject matter expert (SME) for those solutions, maintaining documentation on them and advising others on their underlying technologies and operation.
• Work with security and IT teams to identify threats and problem areas, using that feedback to further strengthen tools and technologies. Materialize this as improvements which result in stronger and safer software and application deployments across SpaceX, measuring in decreased risk and prevalence of issues.
• Create solutions that are scalable, repeatable, maintainable, and secure.
• Work collaboratively with other teams, including individuals in information security, physical security, information technology, human resources, legal, software, and others.

BASIC QUALIFICATIONS:

• Development experience in any modern programming language (including but not limited to Python, C++, Rust, Go)
• Experience developing security architectures and primitives (i.e. TLS, Zero-Trust)
• 8+ years of professional experience in security engineering with a bachelor’s degree in security engineering, cyber security, computer science, engineering, math, or other STEM discipline; OR 10+ years of professional experience in security engineering in lieu of a degree

PREFERRED SKILLS AND EXPERIENCE:

• Experience building automation between tools and systems
• Experience performing analytics against aggregated log data, and building configurations to parse and handle log data from systems and tools
• Familiarity with enterprise security controls and security best practices for Windows, Linux, and Mac systems
• Familiarity with cloud security services, concepts, and best practices
• Strong familiarity with software development lifecycle (SDLC) processes and source control technologies
• Track record of getting things done quickly and with quality
• Demonstrated ability to operate in a dynamic, evolving environment
• Ethical character and uncompromised integrity

ADDITIONAL REQUIREMENTS:

• Willingness to work extended hours and weekends as needed

COMPENSATION AND BENEFITS:

Your actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, and experience.

Base salary is just one part of your total rewards package at SpaceX. You may also be eligible for long-term incentives, in the form of company stock, stock options, or long-term cash awards, as well as potential discretionary bonuses and the ability to purchase additional stock at a discount through an Employee Stock Purchase Plan. You will also receive access to comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short and long-term disability insurance, life insurance, paid parental leave, and various other discounts and perks. You may also accrue 3 weeks of paid vacation and will be eligible for 10 or more paid holidays per year. Exempt employees are eligible for 5 days of sick leave per year.