Senior IT Security Engineer

About the role

Lunaroutpost is seeking a highly skilled Senior IT Security Engineer to join our innovative team based in Golden, Colorado. In this pivotal role, you will be responsible for safeguarding our information systems and ensuring compliance with industry standards. You will work closely with cross-functional teams to identify vulnerabilities, implement security measures, and respond to incidents, all while contributing to the advancement of our mission to explore and utilize space resources.

Key facts

What you'll do

• Design and implement robust security architectures to protect sensitive data and systems from unauthorized access and cyber threats.
• Conduct thorough risk assessments and vulnerability analyses to identify potential security weaknesses within our IT infrastructure.
• Collaborate with software development teams to integrate security best practices into the software development lifecycle (SDLC).
• Monitor and analyze security events and incidents, responding promptly to mitigate risks and ensure business continuity.
• Develop and maintain security policies, procedures, and guidelines in alignment with regulatory requirements and industry standards.
• Lead security awareness training programs for employees to foster a culture of security mindfulness across the organization.
• Coordinate with external auditors and regulatory bodies to ensure compliance with security frameworks and standards.
• Stay updated on the latest security trends, threats, and technologies, and recommend enhancements to our security posture.
• Participate in incident response planning and execution, including post-incident analysis to improve future security measures.
• Work with cloud service providers to ensure secure configurations and compliance in cloud environments.
• Assist in the development and testing of disaster recovery and business continuity plans to ensure resilience against potential disruptions.
• Provide technical guidance and mentorship to junior security team members, fostering their professional growth and development.

Requirements

• A minimum of 5 years of experience in IT security or a related field, with a strong focus on security engineering.
• In-depth knowledge of security frameworks such as NIST, ISO 27001, or CIS, and experience implementing them in a corporate environment.
• Proficiency in security tools and technologies, including firewalls, intrusion detection/prevention systems, and endpoint protection solutions.
• Strong understanding of network security concepts, protocols, and architectures, including VPNs, IDS/IPS, and secure network design.
• Experience with cloud security, particularly in AWS, Azure, or Google Cloud environments, and familiarity with cloud security best practices.
• Excellent problem-solving skills and the ability to think critically under pressure, particularly during security incidents.
• Strong communication skills, with the ability to convey complex security concepts to non-technical stakeholders.
• Relevant certifications such as CISSP, CISM, or CEH are highly desirable.
• Experience with scripting or programming languages (e.g., Python, PowerShell) is a plus.
• A bachelor's degree in Computer Science, Information Technology, or a related field is preferred.

Nice to have

• Familiarity with DevSecOps practices and tools for integrating security into CI/CD pipelines.
• Experience with security compliance audits and assessments, including PCI-DSS, HIPAA, or GDPR.
• Knowledge of threat intelligence and security incident response methodologies.
• Previous experience in a startup or fast-paced environment is a plus.
• Understanding of data privacy regulations and their implications for security practices.

Skills & tools

• Security Information and Event Management (SIEM) tools
• Vulnerability assessment and penetration testing tools
• Endpoint detection and response (EDR) solutions
• Firewalls and network security appliances
• Cloud security tools and services
• Incident response and forensics tools
• Knowledge of programming/scripting languages (Python, Bash, etc.)

Practical notes

• This position is based in Golden, Colorado, and may require occasional travel for training or conferences.
• Candidates must be eligible to work in the United States and may be required to undergo background checks as part of the hiring process.
• Lunaroutpost values diversity and encourages applications from individuals of all backgrounds and experiences.

Join us at Lunaroutpost and be part of a team that is pushing the boundaries of technology and security in the pursuit of exploring and utilizing the resources of space. If you are passionate about IT security and want to make a significant impact in an exciting industry, we encourage you to apply for the Senior IT Security Engineer position today!