Staff Enterprise Security Engineer, True Anomaly

• Minimum of 8 years of experience in information security, with a focus on security engineering
• Proficiency with security tools and technologies such as SIEM, IDS/IPS, vulnerability scanners, and endpoint protection
• Deep understanding of common vulnerabilities and how to exploit them
• Strong engineering understanding of common enterprise technologies, including on-prem and SaaS
• Excellent analytical, problem-solving, and communication skills
• Working knowledge of at least one programming language such as Python, Elixir, C, Rust
• Ability to work independently and collaboratively in a fast-paced environment
• Relevant certifications such as CISSP, CISM, CISA, or equivalents are highly desirable
• To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR) you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State

Desirable

• At True Anomaly, software serves as the central nervous system, seamlessly connecting military objectives, theoretical astrodynamics, and the human and autonomous control of spacecraft with precision
• True Anomaly is on a mission to safeguard this intricate system through robust threat detection and incident response
• As a Staff Enterprise Security Engineer, your mission will be to architect, deploy, and manage advanced threat detection and incident response configurations
• You will directly contribute to the continued evolution of our complex spacecraft modeling and simulation software, ensuring its resilience against emerging cyber threats
• Without needing aerospace-specific experience, you'll take ownership of pioneering greenfield projects, securing crucial software that underpins our innovative engineering and product thesis
• Your work will help shape the future landscape of space technology and the outcome of future conflicts
• Conduct regular security assessments, vulnerability scans, and risk assessments to identify and mitigate potential threats
• Own and implement security hardening for all enterprise and corporate systems
• Provide subject matter expertise for enterprise and corporate systems security
• Participate in an on-call rotation for security events
• Provide vendor recommendations and implementation guidance for management of cloud and on-premise assets
• Identify deficiencies in the current security program and fill them
• Collaborate with cross-functional teams to ensure security measures are integrated into the system development lifecycle
• Monitor and analyze security logs from various sources (e.g., SIEMs, IDS/IPS) to identify suspicious activities and respond to security incidents
• Assist in the development and maintenance of security policies, procedures, and guidelines
• Stay updated with the latest security trends, threats, and technology solutions
• Provide support to internal stakeholders on compliance and security best practices
• Participate in change management and change review board, identifying risks in implementation process

• This position will be open until it is successfully filled