Vulnerabilty Analyst

SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today, SpaceX is actively developing the technologies to make this possible, with the ultimate goal of making life multiplanetary and expanding consciousness to the stars.
SpaceXSI is building Super Intelligence to help humanity understand the universe. Our teams are building the full Super Intelligence stack: from our Colossus supercomputers, to Grok models, to our suite of applications, including Grok Bot, Grok Build, Grok Imagine, Grok Voice, and X. We're creating a powerful flywheel where more compute trains better models, better models power more useful products, and what we learn from people using those products shapes what we build next.

SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today, SpaceX is actively developing the technologies to make this possible, with the ultimate goal of making life multiplanetary and expanding consciousness to the stars.
SpaceXSI is building Super Intelligence to help humanity understand the universe. Our teams are building the full Super Intelligence stack: from our Colossus supercomputers, to Grok models, to our suite of applications, including Grok Bot, Grok Build, Grok Imagine, Grok Voice, and X. We're creating a powerful flywheel where more compute trains better models, better models power more useful products, and what we learn from people using those products shapes what we build next.

The Vulnerability Management team is responsible for assessing and mitigating security risks across our portfolio. This role will focus on vulnerability analysis and risk assessment, ensuring the organization is well-protected against emerging threats. The ideal candidate will have deep expertise in vulnerability scoring, data analysis, and automation.

In this role, you’ll be responsible for evaluating vulnerabilities and determining their impact based on industry standards. You’ll work closely with cross-functional teams to improve security posture and integrate best practices. Your role will include:

• Conducting vulnerability assessments using the CVSS standard as defined by First.org.
• Understanding and implementing vector strings and vector chaining for risk evaluation.
• Performing data analysis to assess security risks across the organization.
• Identifying vulnerability reachability and impact to prioritize security responses.
• Writing Python scripts to manage and manipulate data from sources such as CSV, Excel, JSON, and RESTful APIs.
• Applying MITRE ATT&CK framework for attack path analysis.
  Creating data reporting solutions, including simple dashboards.
• Engaging with stakeholders across the organization to ensure security buy-in.
  Demonstrating strong critical analysis, problem-solving, and security expertise.

• You are a highly skilled Vulnerability Analyst with deep expertise in vulnerability assessment, data management, and security frameworks. You have strong analytical skills and a keen ability to evaluate risk. The ideal candidate will also have:

  • Mastery of CVSS and its environmental processing.
  • Expertise in Python for security data manipulation.
  • Strong understanding of vulnerability impact, risk assessment, and mitigation strategies.
  • Proficiency with MITRE ATT&CK framework for security analysis.
  • Experience creating dashboard-based reports to communicate security findings.
  • Excellent communication and stakeholder management skills.

• Experience with Elastic/Open Search.
• Familiarity with Kibana/Grafana dashboarding.
• Development of security…