NETWORK SECURITY ENGINEER
SpaceX is looking for a Network Security Engineer to implement and operate security for SpaceX corporate and enterprise networks. This is a hands-on network security role: operating firewalls, VPNs, and IDS/IPS; implementing access controls; assessing risk in existing configurations; and keeping security systems maintained in production.
RESPONSIBILITIES:
- Develop and implement network security tools.
- Produce threat models and assess risk around existing configurations.
- Provide subject matter expertise on network security, firewalls, and industry best practices.
- Configure and maintain firewalls and other network security controls on the SpaceX enterprise network based on operational requirements.
- Analyze operational needs that present security challenges and develop secure network solutions.
- Document and formalize security processes.
- Maintain network security systems by applying patches and performing other periodic maintenance.
- Partner with other SpaceX teams to determine functional needs, develop secure architectures, and communicate security best practices and policies.
BASIC QUALIFICATIONS:
- Bachelor's degree in a STEM field and 3+ years of network security experience; OR 5+ years of network security experience in lieu of a degree.
- 1+ years of experience securing networks, IT infrastructure, applications, endpoints, and/or APIs.
- 1+ years of experience hardening Windows, MacOS, and/or Linux operating systems.
PREFERRED SKILLS AND EXPERIENCE:
- Firewalls (Palo Alto and Juniper).
- Network IDS/IPS solutions.
- Network monitoring solutions (NDR).
- Switch/router ACLs.
- Network access control solutions.
- IPsec and TLS-based VPNs.
- Web application firewalls.
- Email security.
- Logging and alerting with SIEMs.
- Python programming and automation.
- Familiarity with networking protocols and the OSI model.
- Experience testing and implementing changes in a production environment.
ADDITIONAL REQUIREMENTS:
- This role requires you to be onsite. Hybrid or remote work will not be considered.
- Willingness to work extended hours and weekends as needed.