Cybersecurity Engineer II

Job description

ABOUT FIREFLY AEROSPACE Firefly Aerospace is a space and defense technology company that enables our world to launch, land, and operate in space – anywhere, anytime. As the partner of choice for critical space missions, Firefly is the only commercial company to launch a satellite to orbit with 24-hour notice and the only company to achieve a successful Moon landing. Our launch vehicles, lunar landers, and orbital vehicles provide government and commercial customers with full mission services from low Earth orbit to the Moon and beyond. Headquartered in north Austin, Texas, Firefly is looking for passionate, hardworking innovators to join our team and help fuel our successful trajectory into space. SUMMARY As a Cybersecurity Engineer II at Firefly, your primary responsibility is designing, implementing, and maintaining robust security measures across our Linux and macOS environments. You will own the security posture of our Unix-based endpoint and server fleet — hardening configurations, managing vulnerabilities, and responding to threats — while also extending secure practices into our cloud infrastructure and containerized environments. You will collaborate closely with cross-functional teams to safeguard our data and systems against cyber threats, ensuring compliance with industry standards and regulations. RESPONSIBILITIES Linux & macOS Security (Primary Duty): o Develop, implement, and maintain security policies and procedures for Linux and macOS systems, ensuring alignment with compliance standards such as ISO 27001, SOC 2, PCI-DSS, and NIST. o Conduct regular security assessments and vulnerability scans across Linux and macOS endpoints and servers, implementing patches and hardened configurations to mitigate risk. o Monitor security tooling and Linux/macOS system logs for suspicious activity; analyze security incidents and respond promptly to contain and remediate threats. o Manage endpoint protection, device compliance, and configuration baselines across the Linux and macOS fleet. Kubernetes and Containerization Security: o Secure Kubernetes clusters using best practices, including RBAC, network policies, and pod security standards. o Manage and secure containerized applications (Docker, Kubernetes), ensuring integrity of container images and registries. o Monitor and remediate vulnerabilities within container environments. Security Monitoring and Incident Response: o Monitor security tools and systems for alerts and events; investigate and respond to incidents. o Develop and maintain incident response plans and playbooks, with regular drills. o Coordinate with internal and external stakeholders during incident response. Documentation and Compliance: o Maintain comprehensive documentation of security policies, procedures, and configurations, with emphasis on Linux/macOS environments. o Support security audits and assessments with necessary documentation and evidence. o Stay current on emerging threats, technologies, and regulatory requirements, adapting strategies accordingly. QUALIFICATIONS Required · Bachelor's degree in Computer Science, Information Security, or a related field. · 2+ years of experience in information security engineering, with a strong, demonstrated focus on Linux and macOS security . · Proficiency in Linux/Unix/macOS operating systems, including security configurations, hardening, and best practices. · Working knowledge of Kubernetes and container orchestration platforms, including security best practices. · Excellent problem-solving skills, attention to detail, and the ability to work both independently and collaboratively. Desired · Certifications such as CISSP, AWS Certified Security – Specialty, Certified Kubernetes Security Specialist (CKS), or similar. · Experience with compliance frameworks such as NIST, ISO 27001, SOC 2, and PCI-DSS. · Experience with cloud platforms (e.g., AWS, Azure), including security services and configurations. · Familiarity with configuration management tools (e.g., Ansible, Terraform, Chef) and infrastructure as code (IaC) practices. · Experience with containerization technologies (e.g., Docker, Kubernetes) and their security considerations. · Experience with Security Information and Event Management (SIEM) monitoring tools and incident response processes. · Strong understanding of networking concepts, protocols, and security measures. · Knowledge of DevSecOps practices and integrating security into CI/CD pipelines. Firefly offers outstanding benefits for our employees, including generous health, dental and vision plans with low plan deductibles, parental leave, relocation benefits, educational reimbursement, short term disability, and flexible PTO options. To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR) you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State. Firefly Aerospace, Inc. is an Equal Opportunity Employer; employment with Firefly is governed based on merit, competence and qualifications and will not be influenced in any manner by race, color, religion, gender, national origin/ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability or any other legally protected status.