Senior Security Engineer - General
-
IT/Tech
Cybersecurity, Systems Engineer, Security Management & Operations, Network Security
Job Description & How to Apply Below
Location:
San Jose
Job Type: Full-time
Salary: $193k-$218k / yr
Apply before December 19, 2026
CompanyFounded in 2021, Muon Space is an end-to-end space systems company that designs, builds, and operates mission-optimized satellite constellations to deliver critical data and enable real-time compute and decision-making in space. Its proprietary technology stack, Halo, integrates advanced spacecraft platforms, robust payload integration and management, and a powerful software-defined orchestration layer to enable high-performance capabilities at unprecedented speed - from concept to orbit.
With state-of-the-art production facilities in Silicon Valley and a growing track record of defense, civil, and commercial and national security customers, Muon Space is redefining how mission-critical intelligence is delivered from space.
Industry: Space Research and Technology
Company size: 251-1000
Headquarters:
Mountain View, California
Funding:
Private
Website:
Job Description AboutThe Role
Muon seeks a Senior Security Engineer to join our Security Engineering & IT team. The ideal candidate brings deep expertise across multiple security domains and can operate independently to protect Muon's infrastructure, data, and people. You will own and advance our security posture across endpoints, networks, cloud environments, and identity systems while contributing to compliance efforts including NIST 800-171 and ITAR/EAR requirements.
This position is hybrid and requires working on-site in our San Jose, CA office three days per week or fully remote from an approved U.S. location.
Responsibilities- Design, deploy, and manage endpoint security solutions (EDR/XDR) across macOS and Windows fleets, including policy tuning, alert triage, and incident response
- Own network security architecture including firewall rule management, IDS/IPS tuning, network segmentation, and VPN infrastructure
- Lead vulnerability management program - run scans, prioritize findings, coordinate remediation with engineering teams, and track closure metrics
- Administer and harden IAM systems (Okta, AWS IAM) including SSO integrations, conditional access policies, privilege access reviews, and lifecycle automation
- Develop and maintain security monitoring and alerting using SIEM platforms, building detection rules and response playbooks
- Conduct security assessments of new tools, vendors, and architectural changes before deployment
- Drive cloud security posture management across AWS environments including IAM policies, S3 bucket security, security group reviews, and Cloud Trail/Guard Duty monitoring
- Support CMMC Level 2 and NIST 800-171 compliance - maintain SSP control narratives, collect evidence, and prepare for assessments
- Develop and deliver security awareness training and phishing simulation campaigns
- Lead or support incident response activities including containment, forensic analysis, root cause determination, and post-incident reporting
- Maintain and improve data loss prevention (DLP) controls for CUI and sensitive data
- Contribute to security policy development and keep documentation current as the environment evolves
- 5+ years of experience in information security or security engineering roles
- Strong hands-on experience with endpoint detection and response platforms (Crowd Strike, Sentinel One, or similar)
- Demonstrated experience managing enterprise vulnerability scanning tools (Tenable, Qualys, Rapid7, or similar)
- Deep understanding of identity and access management principles and hands-on Okta or Azure AD administration
- Proficiency with cloud security in AWS (IAM, VPC, Security Groups, Cloud Trail, Guard Duty, Config)
- Experience with SIEM platforms (Splunk, Sentinel, Elastic, or similar) for log analysis and…
Position Requirements
10+ Years work experience(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).