Senior Security Engineer, True Anomaly

• Bachelor’s degree in Computer Science, Information Security, or equivalent professional experience
• Minimum of 6 years of experience in information security, with a focus on security engineering
• Proficiency with security tools and technologies such as SIEM, IDS/IPS, vulnerability scanners, and endpoint protection
• Deep understanding of common vulnerabilities and how to exploit them
• Strong understanding of cloud security principles and best practices
• Excellent analytical, problem-solving, and communication skills
• Working knowledge of at least one programming language such as Python, Elixir, C, Rust
• Ability to work independently and collaboratively in a fast-paced environment
• Relevant certifications such as CISSP, CISM, CISA, or equivalents are highly desirable
• To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR) you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State

Desirable

• True Anomaly is seeking a highly experienced Security Engineer with cloud certification compliance experience, to contribute to the continuing evolution of our complex spacecraft modeling and simulation software
• You do not need to have experience building space ground systems or experience in aerospace
• You’ll have ownership of challenging, greenfield problems and a chance to fundamentally impact the outcome of future conflict (and the future of the company), all while enjoying world-class benefits including platinum healthcare, flexible work hours/location, highly competitive compensation and a generous stock options package
• Conduct regular security assessments, vulnerability scans, and risk assessments to identify and mitigate potential threats
• Provide subject matter expertise for application and product security
• Participate in an on-call rotation for security events
• Support the deployment of Public Key Infrastructure and NDR/network monitoring
• Provide vendor recommendations and implementation guidance for management of cloud and on-premise assets
• Identify deficiencies in the current security program and fill them
• Collaborate with cross-functional teams to ensure security measures are integrated into the system development lifecycle
• Monitor and analyze security logs from various sources (e.g., SIEMs, IDS/IPS) to identify suspicious activities and respond to security incidents
• Assist in the development and maintenance of security policies, procedures, and guidelines
• Stay updated with the latest security trends, threats, and technology solutions
• Provide support to internal stakeholders on compliance and security best practices
• Participate in change management and change review board, identifying risks in implementation process
• Physical demands—the physical demands of the job, including bending, sitting, lifting and driving