Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 5 hours ago

Sr. Security Engineer (Vulnerability Management)

SpaceX2,886 open roles

Where
Bastrop, TX
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSr. Security Engineer (Vulnerability Management)SpaceX · Bastrop, TX

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on SpaceX's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.6% of postings close within 7 days. Measured by our own scanner across the market. SpaceX postings stay open a median of 63 days.

Share of postings closed within
  1. 2.3%1 day
  2. 4.7%3 days
  3. 13.6%7 days
  4. 21.9%14 days
  5. 36.9%30 days
  6. 59.0%60 days
This job: posted 5 hours ago

SpaceX median: 63 days open

The posting

SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today SpaceX is actively developing the technologies to make this possible, with the ultimate goal of enabling human life on Mars.

SR. SECURITY ENGINEER (VULNERABILITY MANAGEMENT)

SpaceX is looking for a Sr. Security Engineer to join Information Security to help protect and drive the SpaceX mission. Information drives our business. We must protect the confidentiality, integrity, and availability of systems and processes across the enterprise, and defend against loss of control or confidence in our systems.

Information drives our business and we must protect the confidentiality, integrity, and availability of systems and processes across the enterprise. As a highly visible and dynamic organization, we must also value and guard against damage to our reputation and brand. It is paramount that we defend against loss of control or confidence in our systems, to guarantee the highest probability of success.

As a member of the SpaceX Vulnerability Management team, the Security Engineer will act as a trusted partner to application software development teams. This role focuses on identifying, assessing, and remediating vulnerabilities and threats while developing and maintaining internal security tools. The role also includes hands-on work triaging bug reports, conducting Purple and Red Team activities, and continuous threat hunting. Strong communication skills and the ability to turn technical findings into practical, actionable guidance are essential.

RESPONSIBILITIES:

  • Development of tools, processes, and guidance that make security easier to adopt without slowing delivery.
  • Conduct software code reviews to identify insecure patterns and help teams remediate issues.
  • Perform web application security testing using established frameworks and tools.
  • Triage and validate Bugcrowd reports, coordinate with researchers, and work directly with internal teams on remediation and disclosure.
  • Perform Purple Team exercises to test controls, improve detection, and close identified gaps.
  • Contribute to Red Team operations or simulations, including scoping, execution support, and post-exercise analysis.
  • Build and operate emerging vulnerability communication processes so teams receive timely, actionable alerts on new threats.
  • Conduct continuous threat assessment by folding threat intelligence, emerging vulnerabilities, and attack trends into scanning coverage, notifications, and prioritization.
  • Partner with other security sub-teams (detection/response, compliance, application security, infrastructure) to keep efforts consistent and reduce duplication.
  • Escalate critical or time-sensitive issues promptly while offering practical mitigation options.
  • Document findings, produce metrics, and provide regular risk summaries to leadership.

BASIC QUALIFICATIONS:

  • Bachelor's degree in computer science or another STEM discipline; OR 2+ years of professional experience operating production infrastructure and high school diploma or equivalency certificate in lieu of a degree.
  • 5+ years of experience operating on-premises Kubernetes in a production environment.
  • 5+ years of experience with Linux system administration and with Python, Go, or another language used to automate infrastructure.

PREFERRED SKILLS AND EXPERIENCE:

  • Experience identifying, assessing, and remediating vulnerabilities (applications, infrastructure, or cloud).
  • Experience working directly with engineering teams to close findings.
  • Scripting/automation experience (Python, Bash, PowerShell, or similar) and the ability to develop internal tools.
  • Strong understanding of networking fundamentals (TCP/IP, DNS, HTTP/S, firewalls) and how they relate to vulnerability exposure.
  • Reverse engineering or vulnerability development experience.
  • Experience triaging or working reports from bug bounty platforms (Bugcrowd, HackerOne, or similar).
  • Hands-on participation in Purple Team or Red Team exercises.
  • OT Security Experience.
  • Experience with continuous threat assessment, threat intelligence, or risk-based vulnerability prioritization.
  • Experience developing internal security tools, dashboards, or automation pipelines (production-quality code, integrations, etc.).
  • Experience with web application testing frameworks and tools.
  • Experience performing software code reviews for security issues.
  • Experience improving developer experience around security tooling and processes.
  • Knowledge of network segmentation principles and implementation.
  • Experience with asset discovery or inventory processes.
  • Experience building or operating emerging vulnerability notification/alerting workflows.
  • Familiarity with AI/LLMs and MCPs.
  • Familiarity with cloud environments (AWS, Azure, GCP) and their native security/vulnerability features.
  • Experience with configuration management, patching, or infrastructure-as-code.
  • Knowledge of threat modeling, risk scoring (e.g., CVSS), and prioritization frameworks.
  • Familiarity with enterprise security controls and best practices for Windows, Linux, and macOS.
  • Strong communication skills with the ability to translate technical findings into business impact and concrete remediation steps.
  • Relevant certifications (e.g., OSCP, GSEC, or equivalent) or demonstrated equivalent experience.
  • Demonstrable problem-solving skills and ability to quickly determine root causes of issues.

ADDITIONAL REQUIREMENTS:

  • Must be willing to work extended hours and/or weekends as needed.
  • This role requires you to be onsite. Hybrid or remote work will not be considered.
  • Must have a valid driver's license.
  • Ability to pass Air Force background check for Cape Canaveral.

ITAR REQUIREMENTS:

  • To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here.

SpaceX is an Equal Opportunity Employer; employment with SpaceX is governed on the basis of merit, competence and qualifications and will not be influenced in any manner by race, color, religion, gender, national origin/ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability or any other legally protected status.

Applicants wishing to view a copy of SpaceX’s Affirmative Action Plan for veterans and individuals with disabilities, or applicants requiring reasonable accommodation to the application/interview process should reach out to [email protected].

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against SpaceX's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on SpaceX's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    SpaceX's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.