Security Triage Engineer Jobs

2 jobs found

Today

Security Engineer

SpaceX Texas

Texas

Today

Full time Application Security Bugcrowd DevSecOps

Apply Now

Job Description

Security Engineer (Red Team) role within SpaceX Information Security/Vulnerability Management, focused on finding, validating, and driving remediation of vulnerabilities and threats while building security tooling.

Responsibilities

Develop tools, processes, and guidance that help teams adopt security practices without slowing delivery
Conduct software code reviews to identify insecure patterns and support remediation
Perform web application security testing using established frameworks and tools
Triage and validate Bugcrowd reports; coordinate with researchers; work with internal teams on remediation and disclosure
Run Purple Team exercises to test controls, improve detection, and close gaps
Contribute to Red Team operations or simulations, including scoping, execution support, and post-exercise analysis
Build and operate vulnerability communication processes to deliver timely, actionable alerts on new threats
Conduct continuous threat assessment by incorporating threat intelligence, emerging vulnerabilities, and attack trends into scanning coverage, notifications, and prioritization
Partner with other security sub-teams (detection/response, compliance, application security, infrastructure) to align efforts and reduce duplication
Escalate critical or time-sensitive issues promptly, with practical mitigation options
Document findings, produce metrics, and provide regular risk summaries to leadership

Requirements

Bachelor’s degree in computer science or another STEM discipline OR 2+ years of professional experience in security software development in lieu of a degree
Experience with Python; experience with GO, C#, C/C++, or Rust
Experience designing and implementing security solutions for operating systems, distributed systems, or other enterprise/large-scale infrastructure

Preferred Skills and Experience

Experience identifying, assessing, and remediating vulnerabilities (applications, infrastructure, or cloud)
Experience working directly with engineering teams to close findings
Scripting and automation experience (Python, Bash, PowerShell, or similar) and ability to develop internal tools
Strong networking fundamentals understanding (TCP/IP, DNS, HTTP/S, firewalls) and how they relate to vulnerability exposure
Reverse engineering or vulnerability development experience
Experience triaging or working reports from bug bounty platforms (Bugcrowd, HackerOne, or similar)
Hands-on participation in Purple Team or Red Team exercises
OT Security experience
Experience with continuous threat assessment, threat intelligence, or risk-based vulnerability prioritization
Experience developing internal security tools, dashboards, or automation pipelines (production-quality code, integrations, etc.)
Experience with web application testing frameworks and tools
Experience performing software code reviews for security issues
Experience improving developer experience around security tooling and processes
Knowledge of network segmentation principles and implementation
Experience with asset discovery or inventory processes
Experience building or operating emerging vulnerability notification/alerting workflows
Familiarity with AI/LLMs and MCPs
Familiarity with cloud environments (AWS, Azure, GCP) and their native security/vulnerability features
Experience with configuration management, patching, or infrastructure-as-code
Knowledge of threat modeling, risk scoring (e.g., CVSS), and prioritization frameworks
Familiarity with enterprise security controls and best practices for Windows, Linux, and macOS
Strong communication skills to translate technical findings into business impact and concrete remediation steps
Relevant certifications (e.g., OSCP, GSEC, or equivalent) or demonstrated equivalent experience
Demonstrable problem-solving skills and ability to quickly determine root causes

Technologies

Python
GO
C#
C/C++
Rust
Bugcrowd

Additional Requirements

Must be willing to work extended hours and/or weekends as needed
Onsite role in Texas; hybrid or remote work will not be considered

ITAR Requirements

To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State

View full job page →

1mo ago

Application Security Engineer - Container Team (W2 ONLY NO C2C)

Matlen Silver Charlotte, NC

Charlotte, NC

1mo ago Closed

Contract Application Security Cloud Platforms Cloud Security

This position is no longer accepting applications (closed Sep 13, 2026).

Job Description

Matlen Silver is hiring an Application Security Engineer for the Container Team in a contract-to-hire role. This position is based onsite in Charlotte, NC, with the contract-to-hire opportunity also available in Atlanta, GA and Raleigh, NC. The work is hands-on and focused on container security, deploying scanning tooling, and strengthening vulnerability workflows across the SDLC.

This is a 4+ month contract with W2 only (no C2C). The role emphasizes practical problem-solving for scanning accuracy and performance, plus clear technical communication with development teams.

Responsibilities

Provide hands-on container security support, including deployment of container scanning tools such as Wiz, Prisma, and Aqua Security.
Troubleshoot complex scanning issues and optimize configurations to improve accuracy and performance.
Apply strong analytical skills to vulnerability triage and risk prioritization.
Consult with development teams and explain technical findings effectively through strong communication.

Requirements

Hands-on experience with container security and deployment of scanning tools (e.g., Wiz, Prisma, Aqua Security).
Proficiency in scripting languages for automation and tool integration, including Python, Bash, or PowerShell.
Deep understanding of the secure software development lifecycle (SDLC) and common vulnerabilities such as the OWASP Top 10.
Ability to troubleshoot complex scanning issues and optimize configurations for accuracy and performance.
Strong analytical skills for vulnerability triage and risk prioritization.
Excellent communication skills for consulting with development teams and explaining technical findings.
Experience integrating security tools into CI/CD pipelines.
Familiarity with cloud-native security across AWS, Azure, and GCP, as well as container orchestration with Kubernetes.
Exposure to DevSecOps practices and security automation frameworks.
Relevant certifications such as OSWE, GWAPT, or CSSLP.

Tools and Technologies

Wiz, Prisma, Aqua Security
Python, Bash, PowerShell
OWASP Top 10
CI/CD
AWS, Azure, GCP
Kubernetes
DevSecOps
OSWE, GWAPT, CSSLP

Benefits

Health, vision, and dental insurance with single and family coverage
401(k) plan with employee contributions only

View full job page →

Get Security Triage Engineer Jobs alerts

New Security Triage Engineer Jobs, daily.