Application Security Engineer

@ SpaceX

Overview

SpaceX believes in a future where humanity explores the stars. The Application Security Engineer plays a critical role by partnering with development and business teams to integrate security without slowing down delivery.

Responsibilities

• Act as primary contact between Security Engineering and development teams.
• Support developers in secure design practices and code reviews.
• Communicate actionable security findings aligned with business priorities.
• Collaborate with various security sub-teams to maintain consistency.
• Perform comprehensive security reviews and document findings.
• Escalate critical risks and provide mitigation options.
• Participate in peer reviews and share security lessons learned.

Basic Qualifications

Bachelor’s degree in a related field with 1+ years experience (or 4+ years without degree). Experience in secure code practices, programming languages (Python, GO, C#, Rust), and operating system internals (Linux, Windows, Mac) is required.

Preferred Skills And Experience

• Threat modeling and secure architecture design.
• Cloud environments experience (AWS, Azure, GCP) and native security controls.
• Experience with web-based APIs and RESTful services.
• Automation/scripting skills in Python, Bash, or PowerShell.
• Strong communication to translate technical findings.
• Relevant certifications (OSWE, OSCP, GWAPT, etc.).
• Understanding of enterprise security best practices.

Additional Requirements & Compensation

This role is based in Hawthorne, CA and requires onsite work. Extended hours or weekend work may be required. Salary ranges from approximately $130,000-$175,000 per year based on level and qualifications. Benefits include stock options, comprehensive medical coverage, 401(k), and paid leave.

ITAR & Equal Opportunity

Candidates must meet U.S. Government export regulations requirements. SpaceX is an Equal Opportunity Employer committed to diversity and inclusion.

Key skills/competency

• Security Engineering
• Secure Code Review
• Threat Modeling
• Cloud Security
• Risk Mitigation
• Collaboration
• Compliance
• Programming
• Automation
• Communication