Security Engineer (Red Team)
SpaceX · Starbase, TX
About this role
**SpaceX — Security Engineer (Red Team)** SpaceX is looking for a **Security Engineer** to join our **Information Security** department to help protect and drive the SpaceX mission. As a member of the **SpaceX Vulnerability Management** team, you’ll act as a trusted partner to application software development teams—identifying, assessing, and remediating vulnerabilities and threats while developing and maintaining internal security tools. This role includes hands-on triage of bug reports, conducting **Purple/Red Team** activities, and continuous threat hunting. Strong communication skills are essential to turn technical findings into practical, actionable guidance. --- **Responsibilities** - Develop tools, processes, and guidance that make security easier to adopt without slowing delivery - Conduct software code reviews to identify insecure patterns and help teams remediate issues - Perform web application security testing using established frameworks and tools - Triage and validate Bugcrowd reports, coordinate with researchers, and work with internal teams on remediation and disclosure - Perform Purple Team exercises to test controls, improve detection, and close identified gaps - Contribute to Red Team operations or simulations (scoping, execution support, post-exercise analysis) - Build and operate vulnerability communication processes for timely, actionable alerts - Conduct continuous threat assessment by integrating threat intelligence, emerging vulnerabilities, and attack trends into scanning coverage and prioritization - Partner with other security sub-teams (detection/response, compliance, application security, infrastructure) to keep efforts consistent and reduce duplication - Escalate critical/time-sensitive issues promptly with practical mitigation options - Document findings, produce metrics, and provide regular risk summaries to leadership --- **Basic Qualifications** - Bachelor’s degree in computer science or another STEM discipline; **or** 2+ years of professional experience in security software development in lieu of a degree - Experience with **Python**, **Go**, **C#**, **C/C++**, or **Rust** - Experience designing and implementing security solutions for operating systems, distributed systems, or other enterprise/large-scale infrastructure --- **Preferred Skills and Experience** - Experience identifying, assessing, and remediating vulnerabilities (applications, infrastructure, or cloud) - Experience working directly with engineering teams to close findings - Scripting/automation experience (Python, Bash, PowerShell, or similar) and ability to develop internal tools - Strong networking fundamentals (TCP/IP, DNS, HTTP/S, firewalls) and how they relate to vulnerability exposure - Reverse engineering or vulnerability development experience - Experience triaging or working reports from bug bounty platforms (Bugcrowd, HackerOne, or similar) - Hands-on participation in Purple Team or Red Team exercises - OT Security experience - Experience with continuous threat assessment, threat intelligence, or risk-based vulnerability prioritization - Experience developing internal security tools, dashboards, or automation pipelines (production-quality code, integrations, etc.) - Experience with web application testing frameworks and tools - Experience performing software code reviews for security issues - Experience improving developer experience around security tooling and processes - Knowledge of network segmentation principles
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.