™
Security Engineer
Core Responsibilities:
In this role, you will:
You will work alongside cloud engineers, compliance specialists, and NASA stakeholders-building detection coverage, enforcing least-privilege access, and integrating security controls into the CI/CD pipelines that keep the platform moving. You should be comfortable writing code: whether it is Python automation for CVE triage, Go tooling for policy enforcement, or shell scripting for security checks in CI pipelines; this role expects you to build things, not just configure them.
A typical day might begin with triaging new CVEs identified across container images or reviewing overnight alerts from the security monitoring stack. By midday you could be writing Python automation to streamline a vulnerability remediation workflow or integrating a new security check into a GitLab CI/CD pipeline. In the afternoon, you might be conducting an IAM drift analysis across cloud resources, evaluating a new supply-chain security tool like Chainguard or Sigstore, or investigating an anomaly flagged by the SIEM. The work is hands-on, engineering-first, and operating at a scale where your improvements have immediate, measurable impact on systems that carry NASA's mission.
Minimum Qualifications:
Bachelor's Degree in Computer Science, Cybersecurity, or equivalent
At least 4 or more years of relevant security engineering experience
Experience with cloud security engineering on GCP or an equivalent cloud platform (AWS or Azure)
Hands-on experience with container security, Kubernetes hardening, and image vulnerability scanning
Working knowledge of IAM principles and least-privilege enforcement at scale
Experience with security monitoring, SIEM tools, and alert triage
Familiarity with CVE management and vulnerability remediation workflows
Comfortable working in Linux environments and with CLI-based tooling
Working proficiency in at least one modern programming language (Python, Go, JavaScript, or Rust) sufficient to build security tooling, automation scripts, and CI/CD integrations
Ability to excel in a remote work environment
Effective collaboration skills, with the ability to clearly communicate technical concepts to cross-functional teams.
Must be a U.S. citizen and obtain a US Government background investigation.
Preferred Qualifications:
Experience with Chainguard, Sigstore, or similar supply chain security tooling
GCP Security Command Center, Chronicle, or Google Cloud Armor experience
GitLab CI/CD pipeline security integration experience
NIST SP 800-53 or FedRAMP control implementation experience
Security+ or equivalent certification
Prior NASA or federal government security engineering experience
Pay & Benefits
Salary is part of an overall compensation package and is determined within a range. This provides the opportunity for you to grow and develop within a role.
The salary range for this role is between $100,000 and $150,000, and your salary will depend on your skills, qualifications, experience and location.
You will also receive benefits including: Comprehensive medical, dental, and vision coverage with a health savings account, a 401k retirement plan with company match, and company paid life and disability insurance. We also offer permissive leave and holidays.
RA231 is an equal opportunity employer that is committed to inclusion and diversity. We take affirmative action to ensure equal opportunity for all applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin,