This role pays less than
76%
of similar roles. Most pay
$145,700–$197,500
— the shaded band above.
At the midpoint, this role pays about
$145k
versus about
$172k
for comparable roles.
Based on 240 similar postings.
Employer
About SpaceX
SpaceX designs, manufactures, and launches advanced rockets and spacecraft with the mission of enabling humans to become a multi-planetary species. It operates the Falcon 9, Falcon Heavy, and Starship launch vehicles, as well as the Starlink satellite internet constellation.
SpaceX currently has
680 open roles
on FindRole.
Listed pay typically runs
$130,000–$165,000
across 442 roles with salary data.
The IT Security Engineer - Top Secret Clearance joins the Information Technology team to support personnel and systems on classified networks. This role involves designing, deploying, and operating security controls for corporate-style IT networks, including identity services like hardware tokens and certificate-based authentication, as well as on-premises SIEM, endpoint protection, and vulnerability management. The engineer will harden traditional IT services such as email, file servers, and directory services while implementing least privilege models. Day-to-day tasks include triaging incidents, creating automated scripts for security operations using Python, PowerShell, Bash, or Ansible, and ensuring compliance with NIST 800-53 standards. The role focuses on securing infrastructure for engineering teams within a classified environment, requiring expertise in Windows and Linux server hardening to protect critical internal applications and data from potential threats.
Design, deploy, and operate security controls for classified corporate-style IT networks.
Manage identity services including hardware tokens, certificate-based authentication, and privileged access.
Operate on-premises SIEM systems for logging, detection, and incident response.
Harden traditional IT services such as email, file servers, and directory services to reduce standing privileges.
Implement vulnerability management programs and endpoint protection across the enterprise.
Develop scripts and automation to streamline repetitive security tasks and evidence collection.
Partner with system owners to ensure applications are securely designed, patched, and monitored.
Define and document standards for systems design, testing, and implementation.
What we're looking for
Bachelor's degree in computer science, cybersecurity, or another STEM discipline, or 4+ years of professional experience in enterprise IT security engineering.
At least 3 years of hands-on experience securing traditional IT environments including identity/MFA, endpoint security, SIEM, and vulnerability scanning.
Experience administering or operating at least two of the following: on-premises SIEM, enterprise EDR/AV, or an enterprise vulnerability management platform.
Active Top Secret / SCI (TS/SCI) clearance.
Ability to satisfy U.S. Government export control requirements as a U.S. citizen, permanent resident, or eligible refugee/asylee.
Experience securing IT for engineering or corporate users in classified or restricted networks.
Proficiency in scripting and automation using Python, PowerShell, Bash, or Ansible for security operations.
Windows Server
Active Directory
Linux
Networking
Scripting
MS-SQL
Microsoft Exchange
DNS
DHCP
IIS
NPS
Kerberos
IPv4
Routing
Switching
Firewalls
Infrastructure as Code
Configuration Management
Version Control
DevOps
Windows Server
Active Directory
Kerberos
Linux
DNS
DHCP
IIS
MS-SQL
NPS
Microsoft Exchange
IPv4
Routing
Switching
Firewalls
Infrastructure as Code
Configuration Management