Cybersecurity Lead

Job description

Spacecraft represent the most pressing unmet need across the entire aerospace industry. As more launch vehicles come online and the cost to orbit decreases, more companies launching payloads to space continue to emerge. For the first time in history, this influx of payload companies combined with reduced launch costs has resulted in a massive increase in need for commercial spacecraft platforms, known as satellite buses. These buses hold the payloads of our customers and are flown on launch vehicles. Apex manufactures these satellite buses at scale using a combination of software, vertical integration, and hardware that is designed for manufacturing. Our spacecraft enable the future of society: ranging from earth observation to communications and more. We’d love for you to join us on our mission of providing humankind access to the galaxy beyond our planet.  ABOUT THE ROLE The Cybersecurity Lead role at Apex is a critical leadership role responsible for overseeing the daily operations of the Security Operations Center (SOC), ensuring proactive threat detection, incident response, and team performance. This position requires a blend of technical expertise, strategic oversight, and strong leadership skills to safeguard the organization's information assets against cyber threats. The SOC Lead reports to the Director of IT & Cybersecurity and collaborates with IT and compliance to align security operations with business objectives. Key Responsibilities - Team Leadership and Development: Manage a team of SOC analyst(s) & engineer(s), including hiring, training, performance evaluations, and professional development to build a high-performing security operations unit. - Incident Detection and Response: Oversee monitoring of security events using SIEM tools and other technologies; coordinate incident response efforts, including triage, escalation, containment, eradication, and post-incident analysis to minimize impact and ensure rapid resolution. - Threat Intelligence and Hunting: Conduct proactive threat hunting, malware analysis, and deep-dive investigations into escalated incidents; integrate threat intelligence to enhance detection capabilities and stay ahead of emerging cyber risks. - Process and Tool Optimization: Manage, tune, and optimize SOC tools such as SIEM (Elastic), IDS/IPS, endpoint security, and vulnerability management systems; develop and refine security policies, procedures, playbooks, and automation to improve efficiency and reduce false positives. - Metrics and Reporting: Develop, track, and report on key performance indicators (KPIs) and metrics for SOC operations via dashboards and reports; prepare executive summaries on threats, incidents, and defensive posture to inform decision-making. - Strategic Planning and Compliance: Contribute to SOC strategy, including resource allocation, technology evaluations, and integration of new tools; ensure compliance with security standards, conduct tabletop exercises, and collaborate on risk assessments and audits. - Stakeholder Communication and Escalation: Serve as the primary point of escalation for complex incidents; coordinate with internal teams and external partners during active threats; foster cross-functional relationships to support organizational security goals. - Operational Oversight: Ensure 24/7 SOC coverage, including staffing and surge support; perform hands-on analysis as needed and drive continuous improvement in processes to enhance overall cybersecurity resilience. - Assessment & Compliance Support: Assist with achieving CMMC, ISO 27001, and other accreditations needed for the organization. Maintain the accreditations with continuous monitoring and changes. - Assist with other duties: Assist with daily IT tickets and projects when needed. Qualifications - 5-10 years of experience in cybersecurity operations, with at least 2-3 years in a leadership role - Relevant certifications such as CISSP, CISM, GIAC GCIH, or CompTIA Security+. - Proficiency in security tools (SIEM, EDR/XDR, IDP/IDS, CASB/SASE, NESSUS, BURP SUITE, firewalls) and scripting languages (e.g., Python, PowerShell) - Strong technical skills with a strong understanding of networking protocols and operating systems (Windows/MacOS/Linux) - Strong analytical, problem-solving, and communication skills; proven ability to lead teams in high-pressure environments #LI-JC1 WHY JOIN APEX? Apex believes in creating a work environment that you look forward to embracing every day. Our employees love working at Apex, and we want you to love it too. We're a fast-growing startup that has raised more than $500M in funding, and we invest heavily in our people from day one. WHAT WE OFFER FOR FULL-TIME EMPLOYEES: - Shared upside: Receive equity in Apex, letting you benefit from the work you create - Best-in-class healthcare: 100% company-paid medical, dental, and vision for you and your dependents, plus $100k life insurance at no cost - Comprehensive PTO package to reset and recharge - starting at 15 days vacation, growing to 20+ days annually, plus 10 paid holidays - Competitive 401(k) plan with generous matching - 100% match on first 3%, 50% on next 2% - 8 weeks paid parental leave plus childcare reimbursement up to $350/day for work-related travel - Daily catered lunch and unlimited snacks to keep you fueled throughout the day - Vibrant community: Monthly office socials, pickleball tournaments, run club, and gatherings for you and your family - Your dream desk setup and all the tools you need to be your most productive self - World-class Playa Vista office with the benefit of in-person collaboration with amazing coworkers and flexibility to integrate work and life - Real impact opportunity: Work alongside experts from aerospace, new space, and other cutting-edge industries to make a lasting difference ADDITIONAL INFORMATION: Compensation ranges are set by role, level, location, and alignment with market data. A candidate's specific level and base pay are determined case by case and may vary with job-related skills, education, experience, technical capabilities, and internal equity. Beyond base salary, full-time hires are also eligible for long-term incentives in the form of stock options, along with medical, dental, and vision coverage and a 401(k) retirement plan. ITAR REQUIREMENTS Apex's work is governed by U.S. export control laws, including the International Traffic in Arms Regulations (ITAR) and the Export Administration Regulations (EAR). To be eligible for this role, applicants must either (1) qualify as a U.S. Person, meaning a U.S. citizen or national, a lawful permanent resident (green card holder), a refugee admitted under 8 U.S.C. § 1157, or an individual granted asylum under 8 U.S.C. § 1158, or (2) be able to obtain the required export authorizations from the U.S. Department of State, the U.S. Department of Commerce, or another applicable U.S. government agency. You can learn more about ITAR here https://www.pmddtc.state.gov/?id=ddtc_kb_article_page&sys_id=24d528fddbfc930044f9ff621f961987. EQUAL OPPORTUNITY EMPLOYER Apex Technology, Inc. is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. Candidates and employees are always evaluated based on merit, qualifications, and performance. We will never discriminate on the basis of race, color, gender, national origin, ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability, or any other legally protected status.