Security Software Engineer

SECURITY SOFTWARE ENGINEER - TOP SECRET CLEARANCE

As a Security Software Engineer for the Special Programs team, you will contribute to the software development lifecycle for both application and hardware systems, particularly in U.S. Government and ITAR-controlled environments. Expertise in cybersecurity fundamentals and familiarity with ITAR regulations will be beneficial to securely handle ITAR-controlled technical data and payloads. A successful Security Software Engineer will see the big picture, prioritize accordingly, and be comfortable working at different levels of abstraction. Ideal candidates will have notable skills in one or more of the following: 

• Application security
• Applied cryptography
• Network security
• Operating system security
• Secure/authenticated boot
• Incident response and adversary detection
• Vulnerability research

Being flexible, communicating clearly, and establishing and maintaining productive working relationships with other engineering teams are paramount to success here. If you are passionate about building quality products, love the challenges of outsmarting adversaries, and want to make an impact on an interplanetary scale, then you will fit right in. 

RESPONSIBILITIES: 

• Maintain existing production systems and improve security posture via both direct implementation and recommendations to other teams.
• Build prototypes and help identify, design, and test security improvements.
• Implement and promote secure coding practices and software development security methodologies throughout the development lifecycle.
• Implement and enforce secure coding practices (SAST, DAST, threat modeling) throughout the software development lifecycle.
• Work closely with software engineers to set software needs, ensure hardware and software integrate smoothly, troubleshoot and fix major system problems.
• Partner with various teams to define software requirements, system design, and integration strategies.
• Review and guide software development for ITAR-controlled payloads, following all export laws and company rules strictly.
• Ensure all software work and outputs meet U.S. Government standards and ITAR regulations.
• Handle ITAR systems extensively, including controlling access to sensitive technical data and complying with all relevant rules.
• Create and update detailed software documentation, including design specs, test plans, verification steps, and reports needed for U.S. Government contracts and ITAR compliance.

BASIC QUALIFICATIONS: 

• Bachelor's degree in computer science or another STEM discipline; or 2+ years of professional experience in security software development in lieu of a degree.
• Experience with one or more software development languages (i.e. Python, C++, Rust).
• Experience designing and implementing security solutions for operating systems, distributed systems, or other enterprise/large-scale infrastructure.

PREFERRED SKILLS AND EXPERIENCE: 

• Experience contributing security improvements to complex systems.
• Fundamental understanding of network protocols; including the TCP/IP stack as well as UDP based protocols.
• Experienced in navigating large, complex, interactive systems.
• Flexibility, communicating clearly, and establishing and maintaining productive working relationships with other engineering teams.
• Excellent communication skills, both written and verbal.
• Ability to work both independently and in a team.
• Demonstrated ability to deal with ambiguity and to learn new technologies quickly.
• Experience with U.S. Government contracts, including knowledge of government standards and procurement processes.
• Deep knowledge and practical experience with International Traffic in Arms Regulations (ITAR).
• Experience with software version control (e.g., Git), CI/CD pipelines, and automated testing tools.
• Strong analytical and problem-solving skills for troubleshooting complex software-hardware integration issues.
• Active Top Secret, Top Secret SCI, or DOE Level Q clearance.    

ADDITIONAL REQUIREMENTS: 

• This position requires successfully obtaining and maintaining a Top Secret Security Clearance as a condition of employment. While the clearance may not be immediately necessary upon hire, we encourage you to initiate the application process promptly upon accepting this offer. Your ability to secure the necessary clearance is essential for fulfilling key responsibilities of the role. Should you be unable to obtain it, SpaceX reserves the right to modify or terminate your employment to align with operational needs.
• Note that an active clearance may provide the opportunity for you to work on sensitive SpaceX missions. If so, you will be subject to pre-employment drug and random drug and alcohol testing.
• Willing to work extended hours and weekends when needed.

COMPENSATION AND BENEFITS: 

Pay Range:
Security Software Engineer /Level I: $130,000.00 - $155,000.00/per year
Security Software Engineer /Level II: $150,000.00 - $180,000.00/per year 

Your actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, and experience. Those with an active clearance will receive a 10% differential, up to an additional $20,000 annually, once officially briefed into a classified program.

Base salary is just one part of your total rewards package at SpaceX. You may also be eligible for long-term incentives, in the form of company stock, stock options, or long-term cash awards, as well as potential discretionary bonuses and the ability to purchase additional stock at a discount through an Employee Stock Purchase Plan. You will also receive access to comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short and long-term disability insurance, life insurance, paid parental leave, and various other discounts and perks. You may also accrue 3 weeks of paid vacation and will be eligible for 10 or more paid holidays per year. Exempt employees are eligible for 5 days of sick leave per year. Employees accrue paid sick leave pursuant to the Company policy which satisfies or exceeds the accrual, carryover, and use requirements of the law.