Security Engineer (Red Team)

A security engineer on SpaceX's Vulnerability Management team, on-site at Starbase in Texas, who partners with software development teams to find, assess and fix vulnerabilities and takes part in red and purple team work.

The engineer reviews code for insecure patterns, tests web applications, triages and validates Bugcrowd reports with researchers and internal teams, runs purple team exercises and supports red team operations, builds internal security tools and alerting for emerging vulnerabilities, folds threat intelligence into scanning and prioritisation, and reports risk and metrics to leadership. SpaceX asks for a STEM degree or two years of security software development, Python, Go, C#, C/C++ or Rust, and experience securing operating systems or large infrastructure. Bug bounty triage, reverse engineering, OT security, cloud security and OSCP or similar certifications are preferred.