Security Engineer (Vulnerability Management)

About this role

SpaceX seeks a Security Engineer for their Vulnerability Management team to identify, assess, and remediate security threats while building internal tools and partnering with development teams. The role combines hands-on vulnerability testing, threat hunting, and security tool development to protect SpaceX's systems and mission-critical operations.

What you'll do

• Develop security tools, processes, and guidance to integrate security without impeding development velocity
• Conduct software code reviews and web application security testing to identify and help remediate vulnerabilities
• Triage and validate bug bounty reports from platforms like Bugcrowd and coordinate remediation with internal teams
• Execute Purple Team exercises and Red Team operations to test controls, improve detection, and close security gaps
• Perform continuous threat assessment by integrating threat intelligence and emerging vulnerabilities into scanning and prioritization
• Document findings, produce risk metrics, and communicate security summaries to leadership with actionable mitigation steps

What they're looking for

• Python, Go, C#, C++, or Rust programming
• Vulnerability identification, assessment, and remediation (applications, infrastructure, cloud)
• Web application security testing and code review for security issues
• Scripting and automation (Python, Bash, PowerShell) for internal tool development
• Networking fundamentals (TCP/IP, DNS, HTTP/S, firewalls) and their security implications
• Purple Team and Red Team exercise execution
• Bug bounty triage and coordination (Bugcrowd, HackerOne, etc.)
• Threat intelligence, risk-based vulnerability prioritization, and CVSS scoring