Network Security Engineer

SpaceX is looking for a Network Security Engineer with expertise of network security technologies (firewalls, VPNs, IDS/IPS, etc.). This employee will be a member of the Security Engineering team within the larger Information Technology department. The ideal candidate will be flexible, excel at multi-tasking, and flourish in a fast-paced and challenging environment. This person should be a self-starter, self-motivator and possess the ingenuity to excel in this position.

RESPONSIBILITIES:

• Develop and implement network security tools
• Produce threat models and assess risk around existing configurations
• Provide subject matter expertise on network security, firewalls and industry best practices
• Manage firewall configurations within the SpaceX enterprise network based on operational requirements
• Analyze and proactively come up with creative network solutions for operational needs that present security challenges
• Document and formalize security processes
• Manage and maintain network security systems by applying system patches and other periodic maintenance tasks
• Work with other SpaceX teams to determine functional needs, develop secure architectures, and communicate security best practices and policies

BASIC QUALIFICATIONS:

• Bachelor’s degree in a STEM field and 3+ years of network security experience; OR 5+ years of network security experience in lieu of a degree
• 1+ years of experience securing networks, IT infrastructure, applications, endpoints, and/or APIs
• 1+ years of experience hardening Windows, MacOS, and/or Linux operating systems

PREFERRED SKILLS AND EXPERIENCE:

• Strong understanding of network security technologies, their operation and limitations, including:

• Firewalls (Palo Alto and Juniper)

• Network IDS/IPS solutions

• Network monitoring solutions (NDR)

• Switch/router ACLs

• Network access control solutions

• IPSec and TLS based VPNs

• Web application firewalls

• Email security

• Logging and alerting with SIEMs

• Python programming and automation ability

• Familiarity with networking protocols and the OSI model

• Experience testing and implementing changes in a production environment

• Adept at learning new technologies and systems

• Strong self-starting and time-management skills

• Excellent communication skills, both written and verbal

ADDITIONAL REQUIREMENTS:

• This role requires you to be onsite. Hybrid or remote work will not be considered.
• Ability to pass Air Force background check for Cape Canaveral.
• Willingness to work extended hours and weekends as needed.

ITAR REQUIREMENTS:

• To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here.

SpaceX is an Equal Opportunity Employer; employment with SpaceX is governed on the basis of merit, competence and qualifications and will not be influenced in any manner by race, color, religion, gender, national origin/ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability or any other legally protected status.

Applicants wishing to view a copy of SpaceX’s Affirmative Action Plan for veterans and individuals with disabilities, or applicants requiring reasonable accommodation to the application/interview process should reach out to EEOCompliance@spacex.com.