Security Engineer (Vulnerability Management)

SpaceX, Starbase, TX

The role

SpaceX is looking for a Security Engineer to join our Information Security department to help protect and drive the SpaceX mission.

Information drives our business and we must protect the confidentiality, integrity, and availability of systems and processes across the enterprise. As a highly visible and dynamic organization, we must also value and guard against damage to our reputation and brand. It is paramount that we defend against loss of control or confidence in our systems, to guarantee the highest probability of success.

Nice to have

Experience identifying, assessing, and remediating vulnerabilities (applications, infrastructure, or cloud).
Experience working directly with engineering teams to close findings.
Scripting/automation experience (Python, Bash, PowerShell, or similar) and the ability to develop internal tools.
Strong understanding of networking fundamentals (TCP/IP, DNS, HTTP/S, firewalls) and how they relate to vulnerability exposure.
Reverse engineering or vulnerability development experience.
Experience triaging or working reports from bug bounty platforms (Bugcrowd, HackerOne, or similar).
Hands-on participation in Purple Team or Red Team exercises.
OT Security Experience.
Experience with continuous threat assessment, threat intelligence, or risk-based vulnerability prioritization.
Experience developing internal security tools, dashboards, or automation pipelines (production-quality code, integrations, etc.).
Experience with web application testing frameworks and tools.
Experience performing software code reviews for security issues.
Experience improving developer experience around security tooling and processes.
Knowledge of network segmentation principles and implementation.
Experience with asset discovery or inventory processes.
Experience building or operating emerging vulnerability notification/alerting workflows.
Familiarity with AI/LLMs and MCPs.
Familiarity with cloud environments (AWS, Azure, GCP) and their native security/vulnerability features.
Experience with configuration management, patching, or infrastructure-as-code.
Knowledge of threat modeling, risk scoring (e.g., CVSS), and prioritization frameworks.
Familiarity with enterprise security controls and best practices for Windows, Linux, and macOS.
Strong communication skills with the ability to translate technical findings into business impact and concrete remediation steps.
Relevant certifications (e.g., OSCP, GSEC, or equivalent) or demonstrated equivalent experience.
Demonstrable problem-solving skills and ability to quickly determine root causes of issues.

Security Engineer (Vulnerability Management)

The role

Security Engineer (Vulnerability Management)

The role

What you will do

What you need

Basic qualifications

Additional requirements

Itar requirements

Nice to have

About SpaceX

Similar jobs at other companies

Software Engineer, Security

Sr. Application Security Engineer

Security Engineer, Kubernetes

Sr. Infrastructure Security Engineer

Security Engineer, GRC Sales

Software Engineer, Platform Security

Company facts

SpaceX