Security Engineer (Vulnerability Management)

Works on SpaceX's Vulnerability Management team at Starbase, Texas, as an on-site security engineer and trusted partner to application development teams, finding, assessing and fixing vulnerabilities and building the internal tools that support that work.

The engineer reviews code and tests web applications for security flaws, validates Bugcrowd submissions and coordinates remediation and disclosure, runs purple team exercises and supports red team operations, sets up alerting so teams hear quickly about new vulnerabilities, ties threat intelligence into scanning and prioritisation, threat hunts, and reports metrics and risk summaries to leadership. SpaceX asks for a STEM degree or two years of security software development, Python, Go, C#, C/C++ or Rust, and experience securing operating systems or enterprise infrastructure. Bug bounty triage, reverse engineering, cloud and OT security, CVSS-based prioritisation and OSCP or GSEC are preferred.