Sr. Vulnerability Management Engineer

@ SpaceX

About the Role

The Sr. Vulnerability Management Engineer at SpaceX plays a key role in maturing and operating the existing vulnerability management program. You will work closely with infrastructure, engineering, application, and IT teams to identify, manage, and remediate security vulnerabilities across SpaceX's environment.

Responsibilities

• Lead and enforce vulnerability remediation, external attack surface management, and compliance scanning policies.
• Track vulnerabilities from identification to resolution, engaging remediation owners and escalating issues.
• Serve as a vulnerability management SME across multiple platforms including Microsoft, Linux, UNIX, virtualization, networking, databases, and cloud environments.
• Stay updated on latest vulnerabilities and exploitation techniques.
• Partner with security and IT professionals to assess impacts and implement mitigating controls.
• Conduct manual testing and work with red teams to validate vulnerabilities.
• Configure and maintain vulnerability management tools and compliance policy scanning rulesets.
• Develop scripts and automated processes to streamline vulnerability management processes.
• Improve KPIs and brief leadership on critical vulnerabilities.

Basic Qualifications

Bachelor’s degree in a related technical field (or equivalent experience) with 4+ years in information security, networking, or systems administration, and 4+ years specifically in vulnerability and configuration management.

Preferred Skills And Experience

• Experience with Tenable on-premise and cloud products.
• Familiarity with CIS, MSCT, & DISA STIGs and enterprise security controls.
• Proficiency in Python or PowerShell scripting.
• Controlled penetration testing experience and familiarity with tools like J-Frog Artifactory / X-ray.

Additional Requirements

This role is based in Hawthorne, CA and requires on-site presence with potential extended hours or weekends as needed.

Compensation And Benefits

Base salary ranges from $168,000 to $230,000 per year, with eligibility for long-term incentives, bonuses, comprehensive benefits including medical, dental, vision, 401(k), and more.

ITAR Requirements

Applicants must meet U.S. Government export regulations regarding citizenship or authorization status.

Equal Employment Opportunity

SpaceX is an Equal Opportunity Employer. For further details or accommodations, refer to the provided contact information.

Key skills/competency

• Vulnerability Management
• Security Engineering
• Risk Assessment
• Compliance
• Penetration Testing
• Scripting
• Cloud Security
• Linux
• Windows
• Networking