← All roles

Security Engineer (Vulnerability Management)

SpaceX· Security Engineering
Apply on company site
Starbase, TXFull-timePosted 3w ago

About the role

Security Engineer focused on vulnerability management within SpaceX's Information Security team. Responsible for identifying, assessing, and remediating vulnerabilities, developing internal security tools, triaging bug reports, conducting Purple/Red Team activities, threat hunting, and providing actionable risk communications to leadership.

Responsibilities

  • Development of tools, processes, and guidance that make security easier to adopt without slowing delivery.
  • Conduct software code reviews to identify insecure patterns and help teams remediate issues.
  • Perform web application security testing using established frameworks and tools.
  • Triage and validate Bugcrowd reports, coordinate with researchers, and work directly with internal teams on remediation and disclosure.
  • Perform Purple Team exercises to test controls, improve detection, and close identified gaps.
  • Contribute to Red Team operations or simulations, including scoping, execution support, and post-exercise analysis.
  • Build and operate emerging vulnerability communication processes so teams receive timely, actionable alerts on new threats.
  • Conduct continuous threat assessment by folding threat intelligence, emerging vulnerabilities, and attack trends into scanning coverage, notifications, and prioritization.
  • Partner with other security sub-teams to keep efforts consistent and reduce duplication.
  • Escalate critical or time-sensitive issues promptly while offering practical mitigation options.
  • Document findings, produce metrics, and provide regular risk summaries to leadership.

Qualifications

  • Bachelor's degree in computer science or another STEM discipline; OR 2+ years of professional experience in security software development in lieu of a degree.
  • Experience with the Python programming language, GO, C#, C/C++, or Rust.
  • Experience designing and implementing security solutions for operating systems, distributed systems, or other enterprise/large-scale infrastructure.

Skills

Required:Programming in Python/Go/C#/C/C++/RustWeb application security testing
Nice to have:Security tool developmentBug bounty triage/coordinationPurple/Red Team experienceThreat intelligence and risk-based prioritizationNetworking fundamentalsAsset discovery/inventoryCloud security knowledgeOS security hardeningThreat modeling / CVSS
Last updated Sep 30, 2026. Interested? Apply on the company site.

About SpaceX

defense-aero-and-safetysetter-30setter-30-2026-q1wing-list-2026wing-list-2026-giga-stage
Company profileWebsite

More open roles at SpaceX