Sr. Security Engineer (Vulnerability Management)
SpaceX · Bastrop, TX
About this role
**SpaceX — Sr. Security Engineer (Vulnerability Management)** SpaceX is looking for a **Sr. Security Engineer** to join **Information Security** to help protect and drive the SpaceX mission. This role focuses on **identifying, assessing, and remediating vulnerabilities and threats**, while developing and maintaining **internal security tools**. --- ### Responsibilities - Develop **tools, processes, and guidance** that make security easier to adopt without slowing delivery - Conduct **software code reviews** to identify insecure patterns and help teams remediate issues - Perform **web application security testing** using established frameworks and tools - **Triage and validate Bugcrowd reports**, coordinate with researchers, and work with internal teams on remediation and disclosure - Run **Purple Team** exercises to test controls, improve detection, and close gaps - Contribute to **Red Team** operations/simulations (scoping, execution support, and post-exercise analysis) - Build and operate **vulnerability communication processes** for timely, actionable alerts - Perform **continuous threat assessment** by incorporating threat intelligence, emerging vulnerabilities, and attack trends into scanning/notifications/prioritization - Partner with other security sub-teams (detection/response, compliance, application security, infrastructure) to stay aligned and reduce duplication - Escalate **critical/time-sensitive issues** promptly and provide practical mitigation options - Document findings, produce **metrics**, and provide regular **risk summaries** to leadership --- ### Basic Qualifications - Bachelor’s degree in computer science or another STEM discipline; **or** 2+ years of professional experience operating production infrastructure **plus** a high school diploma/equivalency - **5+ years** operating **on-premises Kubernetes** in a production environment - **5+ years** with **Linux system administration** and **Python, Go, or another language** used to automate infrastructure --- ### Preferred Skills & Experience - Experience identifying, assessing, and remediating vulnerabilities (applications, infrastructure, or cloud) - Experience working directly with engineering teams to close findings - Scripting/automation experience (Python, Bash, PowerShell, or similar) and ability to develop internal tools - Strong networking fundamentals (TCP/IP, DNS, HTTP/S, firewalls) and how they relate to vulnerability exposure - Reverse engineering or vulnerability development experience - Experience triaging reports from bug bounty platforms (Bugcrowd, HackerOne, or similar) - Hands-on participation in **Purple Team** or **Red Team** exercises - OT Security experience - Experience with continuous threat assessment, threat intelligence, or risk-based vulnerability prioritization - Experience developing internal security tools/dashboards/automation pipelines (production-quality code, integrations, etc.) - Experience with web application testing frameworks and tools - Experience performing software code reviews for security issues - Experience improving developer experience around security tooling/processes - Knowledge of network segmentation principles and implementation - Experience with asset discovery/inventory processes - Experience building/operating vulnerability notification/alerting workflows - Familiarity with **AI/LLMs** and **MCPs** - Familiarity with cloud environments (AWS, Azure, GCP) and native security/vulnerability features - Experi
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.