[Hiring] Security Automation Engineer @Intuitive Machines

Role Description

Lanteris Space LLC, a wholly owned subsidiary of Intuitive Machines, is hiring a Security Automation Engineer to design, implement, and maintain security controls and automation across our platform infrastructure. This role can be based in our Palo Alto, CA office or remotely in the US.

You will work with:

• Cilium/Tetragon for runtime security
• Kyverno for policy enforcement
• Wiz for cloud security posture management
• Implement vulnerability management and software supply-chain security practices

As a member of our platform team, you'll:

• Enforce security policies in Kubernetes environments
• Automate security controls
• Ensure CMCC Level 2 and ITAR compliance
• Manage vulnerability remediation workflows
• Protect the software supply chain that supports spacecraft development and mission operations

Qualifications

• US Citizen or permanent resident
• Bachelor's degree in Computer Science, Cybersecurity, or related discipline (four additional years of experience may be substituted for a degree)
• Minimum of 5 years of relevant industry experience in security engineering or DevSecOps
• Experience with Kubernetes security including network policies, pod security standards, and admission controllers
• Experience with at least two of the following: Cilium/Tetragon, Kyverno, or similar policy/security enforcement tools
• Experience with vulnerability management tools and processes including scanning, assessment, and remediation tracking
• Experience implementing security controls in CI/CD pipelines
• Experience in container security best practices
• Experience with cloud security in AWS environments
• Scripting and automation skills in Python, Bash, or Go
• Understanding of compliance frameworks (CMMC, NIST 800-171, or similar)

Requirements

• Design and implement runtime security controls using Cilium for network policies and Tetragon for eBPF-based security observability and enforcement
• Develop and maintain Kyverno policies for Kubernetes admission control, resource validation, and security policy enforcement
• Configure and manage Wiz for cloud security posture management, vulnerability scanning, and compliance monitoring across AWS environments
• Implement and maintain vulnerability management programs including scanning, prioritization, remediation tracking, and reporting
• Design and enforce software supply-chain security controls including container image signing, SBOM generation, and artifact verification
• Automate security workflows including vulnerability remediation, policy enforcement, and compliance reporting
• Monitor security events and alerts from Cilium, Tetragon, Wiz, and other security tools
• Collaborate with development teams to integrate security controls into CI/CD pipelines
• Ensure compliance with CMMC Level 2, ITAR, and NIST 800-171 security requirements
• Conduct security assessments of infrastructure and applications, providing remediation guidance
• Create and maintain security documentation including runbooks, policies, and incident response procedures
• Participate in security incident response and post-incident analysis

Preferred Qualifications

• Security certifications such as CISSP, CCSP, CKS (Certified Kubernetes Security Specialist), or CEH
• Experience with Wiz or similar cloud security posture management (CSPM) platforms
• Experience with Cilium for Kubernetes networking and Tetragon for runtime security enforcement
• Experience with Kyverno or OPA (Open Policy Agent) for policy-as-code
• Experience implementing software supply-chain security including SLSA framework, Sigstore, or similar
• Experience with container image scanning tools (Trivy, Black Duck, Snyk, Aqua)
• Experience in aerospace, defense, or government sectors with ITAR or CUI environments
• Experience implementing CMMC Level 2 or FedRAMP security controls
• Experience with eBPF-based security tools and observability
• Experience with SBOM (Software Bill of Materials) generation and analysis
• Kubernetes certifications (CKA, CKAD, CKS)
• Experience with GitOps security practices (ArgoCD, Flux)
• Experience with AWS security services (GuardDuty, Security Hub, Inspector, Config)
• Experience with observability and SIEM tools (Grafana, Splunk, Cribl)
• Experience with zero-trust architecture and micro-segmentation
• Experience with security automation frameworks and orchestration

Benefits

• Comprehensive package of benefits including paid time off
• Health and welfare insurance
• 401(k) to eligible employees