Platform - Security Automation Engineer

Please review the job details below.
Lanteris Space LLC, a wholly owned subsidiary of Intuitive Machines, is hiring a Security Automation Engineer to design, implement, and maintain security controls and automation across our platform infrastructure. This role can be based in our Palo Alto, CA office or remotely in the US. You will work with Cilium/Tetragon for runtime security, Kyverno for policy enforcement, Wiz for cloud security posture management, and implement vulnerability management and software supply-chain security practices.
As a member of our platform team, you'll enforce security policies in Kubernetes environments, automate security controls, ensure CMCC Level 2 and ITAR compliance, manage vulnerability remediation workflows, and protect the software supply chain that supports spacecraft development and mission operations.
Intuitive Machines is a leading space infrastructure company that builds spacecraft, connects networks, and operates infrastructure-as-a-service for commercial, civil, and national security customers. With a proven track record across the space domain, the Company, through organic growth and portfolio expansion, has built over 300 spacecraft, delivered over 260 kilograms of payload to the lunar surface, and provided precision navigation expertise that has guided spacecraft across our solar system.
Principal Responsibilities

Design and implement runtime security controls using Cilium for network policies and Tetragon for eBPF-based security observability and enforcement

Develop and maintain Kyverno policies for Kubernetes admission control, resource validation, and security policy enforcement

Configure and manage Wiz for cloud security posture management, vulnerability scanning, and compliance monitoring across AWS environments

Implement and maintain vulnerability management programs including scanning, prioritization, remediation tracking, and reporting

Design and enforce software supply-chain security controls including container image signing, SBOM generation, and artifact verification

Automate security workflows including vulnerability remediation, policy enforcement, and compliance reporting

Monitor security events and alerts from Cilium, Tetragon, Wiz, and other security tools

Collaborate with development teams to integrate security controls into CI/CD pipelines

Ensure compliance with CMMC Level 2, ITAR, and NIST 800-171 security requirements

Conduct security assessments of infrastructure and applications, providing remediation guidance

Create and maintain security documentation including runbooks, policies, and incident response procedures

Participate in security incident response and post-incident analysis

Minimum Requirements

US Citizen or permanent resident

Bachelor's degree in Computer Science, Cybersecurity, or related discipline, four additional years of experience may be substituted for a degree

Minimum of 5 years of relevant industry experience in security engineering or DevSecOps

Experience with Kubernetes security including network policies, pod security standards, and admission controllers

Experience with at least two of the following: Cilium/Tetragon, Kyverno, or similar policy/security enforcement tools

Experience with vulnerability management tools and processes including scanning, assessment, and remediation tracking

Experience implementing security controls in CI/CD pipelines

Experience in container security best practices

Experience with cloud security in AWS environments

Scripting and automation skills in Python, Bash, or Go

Understanding of compliance frameworks (CMMC, NIST 800-171, or similar)

Preferred Qualifications

Security certifications such as CISSP, CCSP, CKS (Certified Kubernetes Security Specialist), or CEH

Experience with Wiz or similar cloud security posture management (CSPM) platforms

Experience with Cilium for Kubernetes networking and Tetragon for runtime security enforcement

Experience with Kyverno or OPA (Open Policy Agent) for policy-as-code

Experience implementing software supply-chain security including SLSA framework, Sigstore, or similar

Experience with container image scanning tools (Trivy, Black Duck, Snyk, Aqua)

Experience in aerospace, defense, or government sectors with ITAR or CUI environments

Experience implementing CMMC Level 2 or FedRAMP security controls

Experience with eBPF-based security tools and observability

Experience with SBOM (Software Bill of Materials) generation and analysis

Kubernetes certifications (CKA, CKAD, CKS)

Experience with GitOps security practices (ArgoCD, Flux)

Experience with AWS security services (GuardDuty, Security Hub, Inspector, Config)

Experience with observability and SIEM tools (Grafana, Splunk, Cribl)

Experience with zero-trust architecture and micro-segmentation

Experience with security automation frameworks and orchestration

In support of pay transparency at Lanteris Space Systems, we disclose salary ranges on all U.S. job postings. The successful candidate’s starting pay will fall within the salary range provided below and is determined based on job-related factors, including, but not limited to, the experience, qualifications, knowledge, skills, geographic work location, and market conditions. Candidates with the minimum necessary experience, qualifications, knowledge, and skillsets for the position should not expect to receive the upper end of the pay range.
● The base pay for this position within Colorado is: $102,000.00 - $170,000.00 annually.● The base pay for this position within New Jersey is: $102,000.00 - $170,000.00 annually.● The base pay for this position within Delaware is: $102,000.00 - $170,000.00 annually.● The base pay for this position within the Washington, DC metropolitan area is: $113,000.00 - $188,000.00 annually.● The base pay for this position within California is: $117,000.00 - $195,000.00 annually.For all other states, we use geographic cost of labor as an input to develop market-driven ranges for our roles, and as such, each location where we hire may have a different range.

We offer a comprehensive package of benefits including paid time off, health and welfare insurance, and 401(k) to eligible employees. More information on our benefits will be shared with candidates as they move forward in the recruitment process.
The application window is three days from the date the job is posted and will remain posted until a qualified candidate has been identified for hire. If the job is reposted regardless of reason, it will remain posted three days from the date the job is reposted and will remain reposted until a qualified candidate has been identified for hire.

The date of posting can be found on the Lanteris Space Systems Career page at the top of each job posting.

To apply, submit your application via the Lanteris Space Systems Career page.
Lanteris Space Systems values diversity in the workplace and is an equal opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected veteran status, age, or any other characteristic protected by law.
Originally posted on Himalayas