2 months ago
Starbase, TX, USAMid Level
H1B sponsor
Responsibilities
- Develop security tools, processes, and guidance that help engineering teams adopt security practices.
- Conduct secure software code reviews and web application security testing.
- Triage and validate Bugcrowd reports and coordinate remediation and disclosure with researchers and internal teams.
- Perform Purple Team exercises, contribute to Red Team operations, and analyze post-exercise findings.
- Operate vulnerability communication, threat assessment, alerting, scanning, and prioritization processes.
- Partner with detection and response, compliance, application security, and infrastructure teams.
- Document findings, produce metrics, summarize risks for leadership, and escalate critical issues with mitigation options.
Requirements
- Bachelor's degree in computer science or another STEM discipline, or 2+ years of professional experience in security software development in lieu of a degree.
- Experience with Python, Go, C#, C/C++, or Rust.
- Experience designing and implementing security solutions for operating systems, distributed systems, or other enterprise-scale infrastructure.
- Preferred experience includes vulnerability remediation, engineering-team partnership, scripting and automation, networking, reverse engineering, bug bounty platforms, Red and Purple Team exercises, threat intelligence, cloud security, code review, security tooling, and infrastructure security.
- Preferred knowledge includes network segmentation, asset discovery, threat modeling, CVSS risk scoring, enterprise security controls for Windows, Linux, and macOS, and vulnerability prioritization.
- Relevant certifications such as OSCP or GSEC, or equivalent demonstrated experience, are preferred.
- Must have strong communication, problem-solving, and root-cause analysis skills.
- Must be willing to work extended hours and/or weekends as needed.
- Must meet stated ITAR eligibility or authorization requirements.
Benefits
- The role is fully onsite; hybrid and remote work will not be considered.
- Extended hours and/or weekend work may be required as needed.
Categories
About SpaceX
SpaceX designs, manufactures, and launches orbital rockets and spacecraft, and operates Starlink, a global satellite internet network for consumers, businesses, and governments. Its revenue comes from commercial and government launch services (Falcon 9/Falcon Heavy, Dragon cargo and crew to the ISS) and subscription broadband with Starlink hardware and service. Founded in 2002 and headquartered in Hawthorne, California, the privately held company serves NASA and commercial satellite operators, building most systems in-house.