Security Engineer (Vulnerability Management)

Starbase, TX · 2+ years experience · Hybrid · Posted Sep 25, 2026

At a glance

SpaceX is looking for a Security Engineer to join the Information Security department and help protect the SpaceX mission.
As a member of the Vulnerability Management team, the Security Engineer acts as a trusted partner to application software development teams.
The role focuses on identifying, assessing, and remediating vulnerabilities and threats while developing and maintaining internal security tools.

Development of tools, processes, and guidance that make security easier to adopt without slowing delivery.
Conduct software code reviews to identify insecure patterns and help teams remediate issues.
Perform web application security testing using established frameworks and tools.
Triage and validate Bugcrowd reports, coordinate with researchers, and work directly with internal teams on remediation and disclosure.
Perform Purple Team exercises to test controls, improve detection, and close identified gaps.
Contribute to Red Team operations or simulations, including scoping, execution support, and post-exercise analysis.
Build and operate emerging vulnerability communication processes so teams receive timely, actionable alerts on new threats.
Conduct continuous threat assessment by folding threat intelligence, emerging vulnerabilities, and attack trends into scanning coverage, notifications, and prioritization.
Partner with other security sub-teams to keep efforts consistent and reduce duplication.
Escalate critical or time-sensitive issues promptly while offering practical mitigation options.

Bachelor's degree in computer science or another STEM discipline; OR 2+ years of professional experience in security software development in lieu of a degree.
Experience with the Python programming language, GO, C#, C/C++, or Rust.
Experience designing and implementing security solutions for operating systems, distributed systems, or other enterprise/large-scale infrastructure.
Must be willing to work extended hours and/or weekends as needed.
This role requires you to be onsite.

Experience identifying, assessing, and remediating vulnerabilities (applications, infrastructure, or cloud).
Experience working directly with engineering teams to close findings.
Scripting/automation experience (Python, Bash, PowerShell, or similar) and the ability to develop internal tools.
Strong understanding of networking fundamentals (TCP/IP, DNS, HTTP/S, firewalls) and how they relate to vulnerability exposure.
Reverse engineering or vulnerability development experience.
Experience triaging or working reports from bug bounty platforms (Bugcrowd, HackerOne, or similar).
Hands-on participation in Purple Team or Red Team exercises.
OT Security Experience.

This role requires you to be onsite. Hybrid or remote work will not be considered.

Show all 13 skills