Information Security Systems Engineer

About the role

Stoke, a company dedicated to building a thriving space economy, is seeking an experienced Information Security Systems Engineer to join our team. As an Information Security Systems Engineer, you will play a crucial role in securing our infrastructure, engineering environments, manufacturing systems, and sensitive aerospace data.

Responsibilities

• Lead and facilitate the risk assessment process, including identifying, evaluating, and treating information security risks.
• Define, document, and enforce security policies, standards, and procedures in alignment with regulatory and industry compliance standards, including NIST 800-53/171, SOC1/SOC2, ISO 27001.
• Design, implement, and continuously improve security controls across cloud and on-premise systems, including identity, endpoint, network, and logging environments.
• Maintain and improve documentation and evidence required to support audits and compliance activities.
• Collaborate with cross-functional teams to integrate security controls into business processes, IT systems, and engineering development.
• Conduct regular security audits and vulnerability assessments to identify and mitigate potential risks.
• Translate regulatory requirements into practical, scalable controls embedded within our systems.
• Perform hands-on system administration tasks, particularly those related to security configurations.
• Assist with additional duties as assigned to support organizational goals and objectives.

Qualifications

• Exceptional understanding of IT infrastructure, including applications, networks, servers, storage, and cloud technologies.
• Strong analytical and problem-solving skills to identify, address, and mitigate security risks and issues.
• Bachelor’s degree in Computer Science, Cybersecurity, or related field.
• 5+ years of experience in the Information Security field.
• Knowledge of relevant frameworks (e.g., NIST 800-53/171, SOC 2, ISO 27001).
• Excellent written and verbal communication skills.

Preferred Qualifications

• Professional security certifications such as CISSP, GCED, GCIH, or equivalent (or ability to demonstrate equivalent practical experience).
• Experience operating in regulated environments subject to NIST 800-171, NIST 800-53, FedRAMP, ISO 27001, SOC 2, CUI handling, or similar control frameworks.
• Experience integrating security into software development lifecycles (SSDLC), including threat modeling, secure code review practices, CI/CD security controls, and vulnerability remediation workflows.
• Prior experience working in a startup environment, demonstrating adaptability, resourcefulness, and a hands-on approach to security management.

Benefits

• Equity – Stock options for all regular, full-time employees.
• Comprehensive benefits program including subsidized medical, dental, and vision insurance.
• Company-paid life and disability insurance.
• 401(k) plan with employer match.
• 4 weeks’ Paid Time Off.
• 10 days of holidays (including an end-of-year closure).
• 4 weeks of Paid Family/Parental Leave.
• On-site gym or monthly wellness stipend (depending on location).
• Dog-friendly offices!

Compensation

Target Levels: Level 3 range: $133,560 - $200,340
Level 4 range: $160,230 - $240,450

Equal Opportunity

The Company is an Equal Opportunity Employer, including with respect to disability and veteran status. It is committed to compliance with all equal opportunity laws, including the Immigration and Nationality Act (INA) and Title VII. It does not discriminate on the basis of nationality, race, citizenship, immigration status, or any other protected class when it comes to employment practices, including hiring.