o Conduct regular security assessments and vulnerability scans across Linux and macOS endpoints and servers, implementing patches and hardened configurations to mitigate risk.
o Monitor security tooling and Linux/macOS system logs for suspicious activity; analyze security incidents and respond promptly to contain and remediate threats.
o Manage endpoint protection, device compliance, and configuration baselines across the Linux and macOS fleet.
Kubernetes and Containerization Security
o Secure Kubernetes clusters using best practices, including RBAC, network policies, and pod security standards.
o Manage and secure containerized applications (Docker, Kubernetes), ensuring integrity of container images and registries.
o Monitor and remediate vulnerabilities within container environments.
Security Monitoring and Incident Response
o Monitor security tools and systems for alerts and events; investigate and respond to incidents.
o Develop and maintain incident response plans and playbooks, with regular drills.
o Coordinate with internal and external stakeholders during incident response.
Documentation and Compliance
o Maintain comprehensive documentation of security policies, procedures, and configurations, with emphasis on Linux/macOS environments.
o Support security audits and assessments with necessary documentation and evidence.
o Stay current on emerging threats, technologies, and regulatory requirements, adapting strategies accordingly.
QUALIFICATIONS
Required
Bachelor's degree in Computer Science, Information Security, or a related field.
2+ years of experience in information security engineering, with a strong, demonstrated focus on Linux and macOS security.
Proficiency in Linux/Unix/macOS operating systems, including security configurations, hardening, and best practices.
Working knowledge of Kubernetes and container orchestration platforms, including security best practices.
Excellent problem-solving skills, attention to detail, and the ability to work both independently and collaboratively.
Desired
Certifications such as CISSP, AWS Certified Security – Specialty, Certified Kubernetes Security Specialist (CKS), or similar.
Experience with compliance frameworks such as NIST, ISO 27001, SOC 2, and PCI-DSS.
Experience with cloud platforms (e.g., AWS, Azure), including security services and configurations.
Familiarity with configuration management tools (e.g., Ansible, Terraform, Chef) and infrastructure as code (IaC) practices.
Experience with containerization technologies (e.g., Docker, Kubernetes) and their security considerations.
Experience with Security Information and Event Management (SIEM) monitoring tools and incident response processes.
Strong understanding of networking concepts, protocols, and security measures.
Knowledge of DevSecOps practices and integrating security into CI/CD pipelines.
Firefly offers outstanding benefits for our employees, including generous health, dental and vision plans with low plan deductibles, parental leave, relocation benefits, educational reimbursement, short term disability, and flexible PTO options.
To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR) you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State.
Firefly Aerospace, Inc. is an Equal Opportunity Employer; employment with Firefly is governed based on merit, competence and qualifications and will not be influenced in any manner by race, color, religion, gender, national origin/ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability or any other legally protected status.
