Security Engineer (Blue Team)

A Blue Team security engineer in SpaceX Security Operations, on-site in Redmond, who builds the tooling and data feeds the SOC uses to catch sophisticated adversaries in an environment that launches rockets and controls spacecraft.

The engineer improves detection mechanisms and automation frameworks that decide what the SOC sees, works with owners of high-risk systems to find and rank detection gaps, investigates suspicious behaviour surfaced during detection work, joins adversary emulation exercises, and keeps in-house tooling resilient, for example by automating triage or adding and enriching datasets. SpaceX asks for a STEM degree or two years in incident response, security operations or security engineering, and a modern programming language such as Python or Go. CSIRT experience, ETL pipelines for log data, Kubernetes operations and SIEM knowledge are preferred.