Cybersecurity Engineer II

Firefly Aerospace is hiring a Cybersecurity Engineer II to strengthen security across Linux and macOS endpoints, servers, and cloud container environments.

Responsibilities

• Develop, implement, and maintain security policies and procedures for Linux and macOS, aligned to ISO 27001, SOC 2, PCI-DSS, and NIST
• Perform security assessments and vulnerability scans across Linux and macOS endpoints and servers; apply patches and hardened configurations to reduce risk
• Monitor security tooling and Linux/macOS system logs; investigate suspicious activity; analyze security incidents and respond to contain and remediate threats
• Own endpoint security posture for the Unix-based fleet, including hardening, device compliance, and configuration baselines
• Harden Kubernetes using security best practices, including RBAC, network policies, and pod security standards
• Secure containerized applications running on Docker and Kubernetes, ensuring integrity of container images and registries
• Monitor and remediate vulnerabilities in container environments
• Support incident response operations by monitoring tools for alerts and events, then investigating and responding to incidents
• Develop and maintain incident response plans and playbooks, including regular drills
• Coordinate with internal and external stakeholders during incident response
• Maintain detailed documentation for security policies, procedures, and configurations with emphasis on Linux/macOS environments
• Assist with security audits and assessments by providing required documentation and evidence
• Track emerging threats, technologies, and regulatory requirements; adapt security strategies accordingly

Requirements

• Bachelor’s degree in Computer Science, Information Security, or a related field
• 2+ years of information security engineering experience with a strong, demonstrated focus on Linux and macOS security
• Proficiency with Linux/Unix and macOS operating systems, including security configuration, hardening, and best practices
• Working knowledge of Kubernetes and container orchestration security best practices
• Strong problem-solving skills, attention to detail, and ability to work independently and collaboratively

Technologies

• Linux, macOS, Linux/Unix
• Kubernetes, Docker
• RBAC, network policies, pod security standards
• Container images, container registries
• ISO 27001, SOC 2, PCI-DSS, NIST
• SIEM

Benefits

• Generous health, dental, and vision plans with low plan deductibles
• Parental leave
• Relocation benefits
• Educational reimbursement
• Short term disability
• Flexible PTO options

Desired

• Certifications such as CISSP, AWS Certified Security – Specialty, CKS (Certified Kubernetes Security Specialist), or similar
• Experience with compliance frameworks including NIST, ISO 27001, SOC 2, and PCI-DSS
• Experience with cloud platforms (e.g., AWS, Azure), including security services and configuration
• Familiarity with configuration management tools (e.g., Ansible, Terraform, Chef) and infrastructure as code (IaC) practices
• Experience with containerization technologies (e.g., Docker, Kubernetes) and their security considerations
• Experience with SIEM monitoring tools and incident response processes
• Strong understanding of networking concepts, protocols, and security measures
• Knowledge of DevSecOps, including integrating security into CI/CD pipelines

U.S. Government Space Technology Export Compliance (ITAR)

To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR): you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State.