Security Software Engineer

About the role

SpaceX is building the Starlink satellite constellation to provide global broadband internet. This role focuses on securing the software and hardware infrastructure that powers our satellites, user terminals, and network gateways. The position requires ownership of end to end security for critical satellite systems and ground infrastructure. You will design and implement protective measures that defend against sophisticated threats across distributed orbital networks. The work involves close collaboration with hardware, firmware, and software teams to embed security at every layer. You will be responsible for ensuring that security controls are robust, scalable, and verifiable in production environments. This role demands rigorous analysis, proactive threat modeling, and a mindset focused on preventing compromise before it occurs. You will help define security standards that shape the future of connected satellites and user equipment.

Key facts

What you'll do

• Architect and build security infrastructure, including cryptographic services for satellite operations and ground systems.
• Develop security features for satellites, consumer dishes, routers, and gateways to protect communication and data integrity.
• Integrate security into manufacturing processes and provide supporting network services that ensure hardened deployments.
• Manage production systems and provide technical guidance to other engineering teams to elevate security posture and resilience.
• Create prototypes and conduct testing to identify and address vulnerabilities before they reach operational environments.
• Implement secure update and patch mechanisms for distributed satellite constellations and user terminal fleets.
• Analyze security telemetry and incident data to drive improvements in detection, response, and hardening of systems.
• Collaborate with network engineers to align security protocols with the performance and reliability requirements of global connectivity.
• Support security reviews and audits by producing documentation, evidence, and mitigation plans for identified risks.
• Mentor junior engineers on secure coding practices, threat modeling, and the application of cryptographic controls.
• Partner with operations teams to ensure that security tooling integrates smoothly into deployment and monitoring workflows.
• Define security requirements for new satellite generations and ground infrastructure components from the earliest design phases.
• Investigate emerging threats and adapt security architectures to counter new tactics, techniques, and procedures used by adversaries.
• Lead cross functional initiatives that establish best practices for security across software, hardware, and operations.

Requirements

• Bachelor degree in a STEM field or 2+ years of professional experience in security software development.
• Proficiency in Python, C/C++, or Golang for implementing security features and analyzing code for vulnerabilities.
• Experience designing security solutions for distributed systems, operating systems, or infrastructure at scale.
• Must be a U.S. citizen, lawful permanent resident, refugee, or asylee to comply with ITAR regulations.
• Availability to work extended hours and weekends as required to meet project milestones and respond to incidents.
• Strong understanding of core security principles, including confidentiality, integrity, availability, and non repudiation.
• Familiarity with security standards and regulatory requirements relevant to satellite communications and network infrastructure.
• Demonstrated ability to work effectively in fast paced, mission critical environments with evolving priorities.
• Willingness to follow strict security protocols and ensure compliance with organizational and legal obligations.

Nice to have

• Advanced degree in a technical or engineering discipline.
• Experience with security hardware such as TPMs or HSMs for key management and secure storage.
• Knowledge of network protocols, including TCP/IP and UDP based stacks used in satellite links.
• Background in implementing security improvements for complex, large scale systems with high availability demands.
• Experience with intrusion detection, anomaly detection, and threat hunting in distributed environments.
• Understanding of secure boot, firmware validation, and hardware rooted trust mechanisms.
• Exposure to telecommunications operations and the unique challenges of global connectivity.

Practical notes

Salary ranges are $130,000 to $155,000 for Level 1 and $150,000 to $180,000 for Level 2, depending on experience and education. Total compensation includes stock incentives, potential bonuses, and an Employee Stock Purchase Plan. Benefits include medical, dental, and vision insurance, 401(k), life and disability insurance, paid parental leave, 3 weeks of vacation, and 10+ paid holidays.

About the company

Based in Starbase, Texas, a company pursues work in spaceflight, telecom, and artificial intelligence. A unit handles rocket launches, leading yearly orbital counts beyond other national and commercial teams. Another unit runs Starlink, a satellite communications firm. A third area, through SpaceXAI, advances Grok and AI integration with X, while managing data center operations. Roles often cross these paths. Candidates with engineering, software, or operations backgrounds may find chances to join projects that span launch, connectivity, and machine learning efforts in this Texas based enterprise.