Enterprise Security Architect

Spacecraft represent the most pressing unmet need across the entire aerospace industry. As more launch vehicles come online and the cost to orbit decreases, more companies launching payloads to space continue to emerge.For the first time in history, this influx of payload companies combined with reduced launch costs has resulted in a massive increase in need for commercial spacecraft platforms, known as satellite buses. These buses hold the payloads of our customers and are flown on launch vehicles.Apex manufactures these satellite buses at scale using a combination of software, vertical integration, and hardware that is designed for manufacturing. Our spacecraft enable the future of society: ranging from earth observation to communications and more.We’d love for you to join us on our mission of providing humankind access to the galaxy beyond our planet. About the RoleThe Enterprise Security Architect (Cyber Security) is responsible for designing, implementing, and maintaining secure enterprise architectures, systems, applications, networks, and cloud environments. This role provides technical leadership in cybersecurity strategy, risk management, security engineering, and compliance initiatives while ensuring Apex's information assets are protected against evolving cyber threats.The ideal candidate combines deep technical expertise with strong business acumen to develop security solutions that align with organizational objectives, regulatory requirements, and industry best practices.Essential Duties and ResponsibilitiesSecurity Architecture & DesignDesign and maintain enterprise-wide cybersecurity architecture aligned with business and technology strategies.Develop secure architectures for cloud, on-premises, hybrid, and multi-cloud environments.Create and maintain security standards, reference architectures, and technical designdocuments.Perform threat modeling and security architecture reviews for new systems, applications, and infrastructure.Evaluate emerging technologies and recommend security controls and solutions.Security Engineering & ImplementationDesign, implement, and optimize security controls across networks, systems, endpoints, applications, and cloud platforms.Lead deployment and integration of security technologies including SIEM, IDS/IPS, DLP, EDR/XDR, IAM, and vulnerability management platforms.Develop and automate security processes using scripting and infrastructure-as-code methodologies.Collaborate with infrastructure, application development, and cloud engineering teams to embed security into technology solutions.Risk Management & ComplianceConduct security risk assessments, vulnerability assessments, and security audits.Identify security gaps and develop remediation strategies.Ensure compliance with applicable regulatory and industry frameworks, including: NIST 800-53 NIST 800-171/172ISO 27001CIS ControlsSOC 2Support governance, risk, and compliance (GRC) initiatives.Incident Response & Security OperationsProvide architectural guidance during cybersecurity incidents and investigations.Support incident response, threat hunting, and forensic analysis activities.Review security events and identify opportunities to strengthen defensive capabilities.Assist in developing cyber resilience and business continuity strategies.Leadership & CollaborationServe as a cybersecurity subject matter expert for technical and business stakeholders.Mentor junior cybersecurity engineers, analysts, and administrators.Present security recommendations, risk assessments, and strategic initiatives to leadership.Partner with IT, engineering, operations, legal, and compliance teams to support enterprise security objectives.Education RequirementsRequiredBachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Systems, Computer Engineering, or a related technical field.PreferredMaster's degree in Cybersecurity, Information Security, Computer Science, or relateddiscipline.Professional Certifications (Preferred)One or more of the following:CISSP (Certified Information Systems Security Professional)CISM (Certified Information Security Manager)CCSP (Certified Cloud Security Professional)SABSA Security Architecture CertificationAWS Certified Security – SpecialtyMicrosoft Azure Security Engineer AssociateGIAC Security Certifications (GIAC, GSEC, GDSA, etc.)Experience Requirements7–10+ years of experience in cybersecurity, information security, network security, cloud security, or related IT disciplines.3–5+ years of experience designing security architectures or leading cybersecurity engineering initiatives.Experience implementing enterprise security controls and security frameworks.Experience securing cloud platforms such as AWS, Azure, or Google Cloud Platform.Required Technical SkillsSecurity ArchitectureEnterprise Security ArchitectureZero Trust ArchitectureSecure-by-Design PrinciplesThreat ModelingSecurity Control DesignSecurity Roadmap DevelopmentNetwork & Infrastructure SecurityFirewallsIDS/IPSVPN TechnologiesNetwork SegmentationDNS SecurityTCP/IP ProtocolsSecure Network DesignCloud SecurityAWS Security ServicesMicrosoft Azure Security ServicesGoogle Cloud SecurityContainer SecurityKubernetes SecurityInfrastructure as Code (Terraform, CloudFormation)Identity & Access ManagementActive DirectoryEntra ID (Azure AD)Single Sign-On (SSO)Multi-Factor Authentication (MFA)OAuthSAMLPrivileged Access Management (PAM)Security OperationsSIEM Platforms (Elastic,Splunk)Endpoint Detection & Response (EDR/XDR)Vulnerability ManagementSecurity MonitoringThreat IntelligenceIncident ResponseApplication SecuritySecure SDLCDevSecOpsApplication Security Testing (SAST/DAST)API SecurityOWASP Top 10Secure Coding PracticesProgramming & AutomationPythonPowerShellBash/Shell ScriptingREST APIsSecurity AutomationRequired Soft SkillsStrategic thinking and problem-solvingStrong analytical and risk assessment capabilitiesExcellent written and verbal communication skillsAbility to communicate complex technical concepts to non-technical audiencesLeadership and mentoring skillsProject and stakeholder managementCross-functional collaborationDecision-making under pressureStrong documentation and presentation skillsPreferred QualificationsExperience with large-scale enterprise environments.Experience in regulated industries (financial services, healthcare, government, aerospace, defense, etc.).Experience with cloud-native security and DevSecOps practices.Knowledge of MITRE ATT&CK framework and threat intelligence methodologies.Experience supporting security audits and compliance assessments.Experience designing resilient and highly available security architectures.#LI-JC1Why Join Apex?Apex believes in creating a work environment that you look forward to embracing every day. Our employees love working at Apex, and we want you to love it too. We're a fast-growing startup that has raised more than $500M in funding, and we invest heavily in our people from day one.What We Offer For Full-time Employees:Shared upside: Receive equity in Apex, letting you benefit from the work you createBest-in-class healthcare: 100% company-paid medical, dental, and vision for you and your dependents, plus $100k life insurance at no costComprehensive PTO package to reset and recharge - starting at 15 days vacation, growing to 20+ days annually, plus 10 paid holidaysCompetitive 401(k) plan with generous matching - 100% match on first 3%, 50% on next 2%8 weeks paid parental leave plus childcare reimbursement up to $350/day for work-related travelDaily catered lunch and unlimited snacks to keep you fueled throughout the dayVibrant community: Monthly office socials, pickleball tournaments, run club, and gatherings for you and your familyYour dream desk setup and all the tools you need to be your most productive selfWorld-class Playa Vista office with the benefit of in-person collaboration with amazing coworkers and flexibility to integrate work and lifeReal impact opportunity: Work alongside experts from aerospace, new space, and other cutting-edge industries to make a lasting differenceReady to join a team where your contributions matter and your future is bright? Let's build something extraordinary together.Equal Opportunity EmployerApex Technology, Inc. is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. Candidates and employees are always evaluated based on merit, qualifications, and performance. We will never discriminate on the basis of race, color, gender, national origin, ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability, or any other legally protected status.Compensation Range: $100K - $135KLocationLos AngelesEmployment TypeFull timeLocation TypeOn-siteDepartmentOperations, Strategy, & AdministrativeCompensation$100K – $135K • Offers EquityThe stated compensation range reflects only the targeted base salary range and excludes additional benefits. If your salary requirements fall outside of the range, we still encourage you to apply.