Cybersecurity Engineer II

ABOUT FIREFLY AEROSPACE Firefly Aerospace is a space and defense technology company that enables our world to launch, land, and operate in space – anywhere, anytime. As the partner of choice for critical space missions, Firefly is the only commercial company to launch a satellite to orbit with 24-hour notice and the only company to achieve a successful Moon landing. Our launch vehicles, lunar landers, and orbital vehicles provide government and commercial customers with full mission services from low Earth orbit to the Moon and beyond.

Headquartered in north Austin, Texas, Firefly is looking for passionate, hardworking innovators to join our team and help fuel our successful trajectory into space.

SUMMARYAs a Cybersecurity Engineer II at Firefly, your primary responsibility is designing, implementing, and maintaining robust security measures across our Linux and macOS environments. You will own the security posture of our Unix-based endpoint and server fleet — hardening configurations, managing vulnerabilities, and responding to threats — while also extending secure practices into our cloud infrastructure and containerized environments. You will collaborate closely with cross-functional teams to safeguard our data and systems against cyber threats, ensuring compliance with industry standards and regulations.

RESPONSIBILITIES Linux & macOS Security (Primary Duty):o Develop, implement, and maintain security policies and procedures for Linux and macOS systems, ensuring alignment with compliance standards such as ISO 27001, SOC 2, PCI-DSS, and NIST.o Conduct regular security assessments and vulnerability scans across Linux and macOS endpoints and servers, implementing patches and hardened configurations to mitigate risk.o Monitor security tooling and Linux/macOS system logs for suspicious activity;

analyze security incidents and respond promptly to contain and remediate threats.o Manage endpoint protection, device compliance, and configuration baselines across the Linux and macOS fleet.

Kubernetes and Containerization Security:o Secure Kubernetes clusters using best practices, including RBAC, network policies, and pod security standards.o Manage and secure containerized applications (Docker, Kubernetes), ensuring integrity of container images and registries.o Monitor and remediate vulnerabilities within container environments.

Security Monitoring and Incident Response:o Monitor security tools and systems for alerts and events; investigate and respond to incidents.o Develop and maintain incident response plans and playbooks, with regular drills.o Coordinate with internal and external stakeholders during incident response.

Documentation and Compliance:o Maintain comprehensive documentation of security policies, procedures, and configurations, with emphasis on Linux/macOS environments.o Support security audits and assessments with necessary documentation and evidence.o Stay current on emerging threats, technologies, and regulatory requirements, adapting strategies accordingly.

QUALIFICATIONS Required
· Bachelor's degree in Computer Science, Information Security, or a related field.
· 2+ years of experience in information security engineering, with a strong, demonstrated focus on Linux and macOS security.
· Proficiency in Linux/Unix/macOS operating systems, including security configurations, hardening, and best practices.
· Working knowledge of Kubernetes and container orchestration platforms, including security best practices.
· Excellent problem-solving skills, attention to detail, and the ability to work both independently and collaboratively.

Desired
· Certifications such as CISSP, AWS Certified Security – Specialty, Certified Kubernetes Security Specialist (CKS), or similar.
· Experience with…