Sr. Embedded Security Engineer (Starlink)
About the role
SpaceX is leveraging its experience in building rockets and spacecraft to deploy Starlink, the world’s most advanced broadband internet system. Starlink is the world’s largest satellite constellation, providing fast, reliable internet to millions of users worldwide. The Embedded Security Engineer (Starlink) will design, build, test, and operate security‑critical components across the system—including satellites, consumer receivers, routers, dishes, gateways, and supporting software—to maximize Starlink’s utility for communities and businesses around the globe.
Skills
- Software engineering
- Applied cryptography
- Network security
- Operating system security
- Secure/Authenticated boot
- Incident response and adversary detection
- Vulnerability research
- Flexibility, clear communication, and strong collaboration with other engineering teams
Responsibilities
- Design and build security infrastructure for Starlink, including cryptographic services and other security‑critical services.
- Develop security features for Starlink systems, including routers, dishes, gateways, and satellites.
- Design security into factory processes and provide network services in support of these processes.
- Maintain existing production systems and improve security posture through direct implementation and recommendations to other teams.
- Build prototypes and help identify, design, and test security improvements.
- Further the mission of providing secure and reliable Internet to underserved communities.
Basic Qualifications
- Bachelor’s degree in computer science or another STEM discipline and 5+ years of professional experience in security software development; OR 7+ years of professional experience in security software development in lieu of a degree.
- Experience with one or more software development languages (e.g., Python, C++, Golang).
- Experience designing and implementing security solutions for operating systems, distributed systems, or other enterprise/large‑scale infrastructure.
Preferred Skills and Experience
- Experience contributing security improvements to complex systems.
- Experience working with special‑purpose security hardware such as Trusted Platform Modules (TPMs) and Hardware Security Modules (HSMs).
- Fundamental understanding of network protocols, including the TCP/IP stack and UDP‑based protocols.
- Experience navigating large, complex, interactive systems.
- Flexibility, clear communication, and the ability to establish and maintain productive working relationships with other engineering teams.
- Excellent written and verbal communication skills.
- Ability to work both independently and as part of a team.
- Demonstrated ability to deal with ambiguity and learn new technologies quickly.
- Advanced degree in a technical or engineering discipline.
Additional Requirements
- Must be willing to work extended hours and weekends as needed.
Compensation and Benefits
Pay Range (Level 3): $170,000.00 – $265,000.00. Base salary is determined case‑by‑case based on knowledge, skills, education, and experience. Total rewards include long‑term incentives (company stock or cash awards), discretionary bonuses, and the ability to purchase additional stock at a discount through an Employee Stock Purchase Plan.
- Comprehensive medical, vision, and dental coverage.
- 401(k) retirement plan.
- Short‑ and long‑term disability insurance.
- Life insurance.
- Paid parental leave.
- Various discounts and perks.
- Three weeks of paid vacation.
- Ten or more paid holidays per year.
- Paid sick leave that meets or exceeds legal requirements.
ITAR Requirements
To conform to U.S. Government export regulations, applicants must be a U.S. citizen or national, a U.S. lawful permanent resident (green card holder), a refugee under 8 U.S.C. 1157, an asylee under 8 U.S.C. 1158, or be eligible to obtain the required authorizations from the U.S. Department of State.