Security Engineer

We need to output HTML fragment with sections: About the role? The posting includes description about SpaceX mission, then role description. We need to use

for section headings: e.g., About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We must only include sections when posting has real, specific content. We have: - About the role: The paragraph describing the role: "SpaceX is looking for a Security Engineer to join Information Security to help protect and drive the SpaceX mission. Information drives our business..." That's about the role. So we can have

About the role

with

containing that paragraph. - Responsibilities: list of bullet points under "Responsibilities". We'll put

Responsibilities

then

• each. - Requirements: There's "Basic Qualifications" and "Additional Requirements". Could combine into Requirements section. Also "Preferred Skills And Experience" could be Skills section. Also "Compensation And Benefits" includes Pay Range and benefits. So we need sections: Requirements (basic qualifications + additional requirements), Skills (preferred skills), Benefits (benefits description), Pay (pay range). Schedule: The posting mentions "Must be willing to work extended hours and/or weekends as needed. This role requires you to be onsite. Hybrid or remote work will not be considered." That's schedule info (onsite, extended hours). So we can include Schedule section. We must not repeat job title as heading. No Job ID etc. We must remove boilerplate: EEO, ITAR? Actually ITAR is a requirement (citizenship). That's part of requirements? It says "ITAR Requirements To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C.1157, or (iv) Asylee under 8 U.S.C.1158, or be eligible to obtain the required authorizations from the U.S. Department of State." That's a requirement (citizenship). Should be included in Requirements. We must not include Equal Opportunity Employer etc. We must preserve all substantive information. We need to output only HTML fragment. Let's extract content. About the role paragraph: "SpaceX is looking for a Security Engineer to join Information Security to help protect and drive the SpaceX mission. Information drives our business. We must protect the confidentiality, integrity, and availability of systems and processes across the enterprise, and defend against loss of control or confidence in our systems. This role writes and operates the software and infrastructure behind SpaceX security standards." Responsibilities list (as given): - Design, build, and maintain technology that protects SpaceX systems, networks, and data. - Stand up authentication and identity services, multi-factor authentication, and network access control identity. - Automate identity lifecycle for Information Security and partner organizations. - Run backend infrastructure that network security services depend on. - Operate web application firewalls and other application-level security controls. - Enforce cloud security policy, centralized configuration, and monitoring. - Document what you run, keep it working, and advise other teams on it. - Find threats and gaps with security and IT, then ship software and deployment changes that reduce risk. - Deliver solutions that are scalable, repeatable, maintainable, and secure. - Coordinate with information security, physical security, IT, HR, legal, software, and other partners. Basic Qualifications: - Bachelor's degree in computer science or another STEM discipline; OR 2+ years of professional experience in security software development in lieu of a degree. - Experience with Python, Go, C#, C/C++, or Rust. - Experience designing and implementing security solutions for operating systems, distributed systems, or other enterprise / large-scale infrastructure. Additional Requirements: - Must be willing to work extended hours and/or weekends as needed. - This role requires you to be onsite. Hybrid or remote work will not be considered. - ITAR Requirements: To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C.1157, or (iv) Asylee under 8 U.S.C.1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Preferred Skills And Experience: - Writing, shipping, and operating secure software. - Linux, Windows, and macOS system internals. - Public key infrastructure (PKI) and related technologies. - SAML, OIDC, and OAuth. - TPMs and HSMs. - TCP/IP and UDP at the level needed to build and debug services. - Navigating large, interactive systems. - Web APIs, HTTP-RPC, and REST. - Hardening Windows, Linux, and macOS to enterprise security controls. - macOS and Windows code-signing and enterprise application deployment. - Root-cause debugging under time pressure. Compensation And Benefits: - Pay Range: Level 1: $130,000 - $165,000; Level 2: $150,000 - $200,000. Your actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, and experience. Base salary is just one part of your total rewards package at SpaceX. You may also be eligible for long-term incentives, in the form of company stock or long-term cash awards, as well as potential discretionary bonuses and the ability to purchase additional stock at a discount through an Employee Stock Purchase Plan. You will also receive access to comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short and long-term disability insurance, life insurance, paid parental leave, and various other discounts and perks. You may also accrue 3 weeks of paid vacation and will be eligible for 10 or more paid holidays per year. Employees in Washington State accrue paid sick time in compliance with state and federal law. Company shuttles are offered to employees for roundtrip travel from select Seattle locations to the SpaceX Redmond office Monday to Friday. Schedule: Already captured in Additional Requirements (extended hours, onsite). We'll put schedule section with that info. We must not include placeholder text like "commensurate with experience". Not present. We need to ensure we don't create sections with empty content. Let's craft HTML:

  About the role

  SpaceX is looking for a Security Engineer to join Information Security to help protect and drive the SpaceX mission. Information drives our business. We must protect the confidentiality, integrity, and availability of systems and processes across the enterprise, and defend against loss of control or confidence in our systems. This role writes and operates the software and infrastructure behind SpaceX security standards.

  Responsibilities

  • Design, build, and maintain technology that protects SpaceX systems, networks, and data.
  • Stand up authentication and identity services, multi-factor authentication, and network access control identity.
  • Automate identity lifecycle for Information Security and partner organizations.
  • Run backend infrastructure that network security services depend on.
  • Operate web application firewalls and other application-level security controls.
  • Enforce cloud security policy, centralized configuration, and monitoring.
  • Document what you run, keep it working, and advise other teams on it.
  • Find threats and gaps with security and IT, then ship software and deployment changes that reduce risk.
  • Deliver solutions that are scalable, repeatable, maintainable, and secure.
  • Coordinate with information security, physical security, IT, HR, legal, software, and other partners.

  Requirements

  • Bachelor's degree in computer science or another STEM discipline; OR 2+ years of professional experience in security software development in lieu of a degree.
  • Experience with Python, Go, C#, C/C++, or Rust.
  • Experience designing and implementing security solutions for operating systems, distributed systems, or other enterprise / large-scale infrastructure.
  • Must be willing to work extended hours and/or weekends as needed.
  • This role requires you to be onsite. Hybrid or remote work will not be considered.
  • To conform to U.S. Government export regulations (ITAR), applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C.1157, or (iv) Asylee under 8 U.S.C.1158, or be eligible to obtain the required authorizations from the U.S. Department of State.

  Skills

  • Writing, shipping, and operating secure software.
  • Linux, Windows, and macOS system internals.
  • Public key infrastructure (PKI) and related technologies.
  • SAML, OIDC, and OAuth.
  • TPMs and HSMs.
  • TCP/IP and UDP at the level needed to build and debug services.
  • Navigating large, interactive systems.
  • Web APIs, HTTP-RPC, and REST.
  • Hardening Windows, Linux, and macOS to enterprise security controls.
  • macOS and Windows code-signing and enterprise application deployment.
  • Root-cause debugging under time pressure.

  Pay

  Pay Range: Level 1: $130,000 - $165,000; Level 2: $150,000 - $200,000. Your actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, and experience. Base salary is just one part of your total rewards package at SpaceX. You may also be eligible for long-term incentives, in the form of company stock or long-term cash awards, as well as potential discretionary bonuses and the ability to purchase additional stock at a discount through an Employee Stock Purchase Plan.

  Benefits

  You will also receive access to comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short and long-term disability insurance, life insurance, paid parental leave, and various other discounts and perks. You may also accrue 3 weeks of paid vacation and will be eligible for 10 or more paid holidays per year. Employees in Washington State accrue paid sick time in compliance with state and federal law. Company shuttles are offered to employees for roundtrip travel from select Seattle locations to the SpaceX Redmond office Monday to Friday.

  Schedule

  Must be willing to work extended hours and/or weekends as needed. This role requires you to be onsite. Hybrid or remote work will not be considered.

  We have duplicated the extended hours/onsite text in both Requirements and Schedule. The requirement list already includes those items; we could avoid duplication by moving them to Schedule only. But the instructions: preserve ALL substantive information; we can keep them in both places? Might be considered duplication but not prohibited. However better to avoid duplication: we could remove them from Requirements and keep only in Schedule. But the requirement list originally had those as separate bullet points; we could keep them in Requirements as they are part of qualifications? They are more about schedule. The spec says we should not repeat job title etc. Duplication not explicitly forbidden but we should aim to avoid unnecessary duplication. Let's move the schedule-related items to Schedule section only, and remove from Requirements. Thus Requirements will