Sr. Application Security Engineer

SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today SpaceX is actively developing the technologies to make this possible, with the ultimate goal of enabling human life on Mars.

SR. APPLICATION SECURITY ENGINEER

At SpaceX we’re leveraging our experience in building rockets and spacecraft to deploy Starlink, the world’s most advanced broadband internet system. Starlink is the world’s largest satellite constellation and is providing fast, reliable internet to millions of users worldwide. We design, build, test, and operate all parts of the system – thousands of satellites, consumer antennae that allow users to connect within minutes of unboxing, and the software that brings it all together. We’ve only begun to scratch the surface of Starlink’s potential global impact and are looking for best-in-class engineers to help maximize Starlink’s utility for communities and businesses around the globe. As a Security Software Engineer, you will influence the security of Starlink.com and associated internet infrastructure which our millions of customers use every day to manage their Starlink account and equipment. In this role, you will continually assess Starlink Internet infrastructure and applications for security issues, provide detailed early-stage design feedback to developers, and ensure we're protecting customer data. This role will focus on identifying new security issues, driving long-term improvement, and providing continuous guidance to developers as the Starlink system grows. You will also be responsible for monitoring and responding to bug bounty submissions. Ideally, you have notable skills in one or more of the following: Web and mobile application penetration testing Web and mobile application software development Defending production infrastructure Being flexible, communicating clearly, and establishing and maintaining productive working relationships with other engineering teams are paramount to success. If you are passionate about building quality products, love the challenges of outsmarting adversaries, and want to make an impact on an inter-planetary scale, then you will fit right in.

RESPONSIBILITIES:

Design and build security infrastructure for Starlink.com and the Starlink mobile application Continually audit and assess Starlink Internet infrastructure for security issues Design security into software processes and provide developer guidance for building secure applications Monitor bug bounty submissions and coordinate response to legitimate submissions Build prototypes and help identify, design, and test security improvements Further our mission of providing secure and reliable Internet to underserved communities

BASIC QUALIFICATIONS:

Bachelor's degree in computer science or another STEM discipline and 5+ years of professional experience in security software development; OR 7+ years of professional experience in security software development in lieu of a degree Experience with one or more software development languages (i.e. Python, C++, Golang, C#) Experience designing and implementing application security solutions for web and or mobile applications

PREFERRED SKILLS AND EXPERIENCE:

Experience contributing security improvements to complex systems Track record of identifying high-impact vulnerabilities in real-world applications Fundamental understanding of networking and network protocols Flexibility, communicating clearly, and establishing and maintaining productive working relationships with other engineering teams Excellent communication skills, both written and verbal Ability to work both independently and in a team Demonstrated ability to deal with ambiguity and to learn new technologies quickly Advanced degree in a technical or engineering discipline

ADDITIONAL REQUIREMENTS:

Must be willing to work extended hours and weekends as needed

COMPENSATION AND BENEFITS:

Pay Range: Level 3: $170,000.00 - $235,000.00 Your actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, and experience. Base salary is just one part of your total rewards package at SpaceX. You may also be eligible for long-term incentives, in the form of company stock or long-term cash awards, as well as potential discretionary bonuses and the ability to purchase additional stock at a discount through an Employee Stock Purchase Plan. You will also receive access to comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short and long-term disability insurance, life insurance, paid parental leave, and various other discounts and perks. You may also accrue 3 weeks of paid vacation and will be eligible for 10 or more paid holidays per year. Employees in Washington State accrue paid sick time in compliance with state and federal law. Company shuttles are offered to employees for roundtrip travel from select Seattle locations to the SpaceX Redmond office Monday to Friday.

ITAR REQUIREMENTS:

To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here. SpaceX is an Equal Opportunity Employer; employment with SpaceX is governed on the basis of merit, competence and qualifications and will not be influenced in any manner by race, color, religion, gender, national origin/ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability or any other legally protected status. Applicants wishing to view a copy of SpaceX’s Affirmative Action Plan for veterans and individuals with disabilities, or applicants requiring reasonable accommodation to the application/interview process should reach out to View email address on click.appcast.io.