Security Engineer (Embedded & Networking)

Responsibilities

• Design, build, and maintain technology solutions and systems that provide security for SpaceX systems, networks, and data.
• This can include: Authentication and identity services, including multi-factor solutions, network access control identity servers, and related authentication and authorization technologies.
• Identity lifecycle management services and automation.
• Build and maintain scripts and automation that support the information security mission across SpaceX, to be utilized by information security teammates and other partner organizations.
• Network security systems and the backend infrastructure that powers such services.
• Application level security controls (e.g. web application firewalls).
• Cloud deployments security policy enforcement, centralized configuration management, monitoring, etc.
• Serve as the subject matter expert (SME) for those solutions, maintaining documentation on them and advising others on their underlying technologies and operation.
• Work with security and IT teams to identify threats and problem areas, using that feedback to further strengthen tools and technologies.
• Materialize this as improvements which result in stronger and safer software and application deployments across SpaceX, measuring in decreased risk and prevalence of issues.
• Create solutions that are scalable, repeatable, maintainable, and secure.
• Work collaboratively with other teams, including individuals in information security, physical security, information technology, human resources, legal, software, and others.

Requirements

• Bachelor's degree in computer science or another STEM discipline; OR 2+ years of professional experience in security software development in lieu of a degree.
• Experience with the Python programming language, GO, C#, C/C++, or Rust.
• Experience designing and implementing security solutions for operating systems, distributed systems, or other enterprise/large-scale infrastructure.

Preferred Skills And Experience

• Experience with secure code development practices.
• Experience with Linux, Windows, and Mac system internals.
• Strong knowledge of public key infrastructure (PKI) environments and related technologies.
• Experience with SAML, OIDC, and OAuth.
• Experience working with special purpose security hardware such as Trusted Platform Modules (TPMs) and Hardware Security Modules (HSMs).
• Fundamental understanding of network protocols; including the TCP/IP stack as well as UDP based protocols.
• Experienced in navigating large, complex, interactive systems.
• Familiarity with developing web-based APIs, HTTP-RPC, and REST.
• Familiarity with enterprise security controls and security best practices for Windows, Linux, and Mac systems.
• Effective problem-solving skills, and ability to quickly determine root-causes of issues.
• Familiarity with macOS and Windows code-signing and deployment of enterprise applications.