[Remote] Senior Security Engineer - General

Note: The job is a remote job and is open to candidates in USA. Muon Space is hiring a Senior Security Engineer to protect and advance the security of its infrastructure, data, and people. The role owns security across endpoints, networks, cloud environments, and identity systems, and supports compliance efforts including CMMC Level 2 and NIST SP 800-171.

Responsibilities

• Design, deploy, and manage endpoint security solutions (EDR/XDR) across macOS and Windows fleets, including policy tuning, alert triage, and incident response
• Own network security architecture including firewall rule management, IDS/IPS tuning, network segmentation, and VPN infrastructure
• Lead vulnerability management program — run scans, prioritize findings, coordinate remediation with engineering teams, and track closure metrics
• Administer and harden IAM systems (Okta, AWS IAM) including SSO integrations, conditional access policies, privilege access reviews, and lifecycle automation
• Develop and maintain security monitoring and alerting using SIEM platforms, building detection rules and response playbooks
• Conduct security assessments of new tools, vendors, and architectural changes before deployment
• Drive cloud security posture management across AWS environments including IAM policies, S3 bucket security, security group reviews, and CloudTrail/GuardDuty monitoring
• Support CMMC Level 2 and NIST SP 800-171 compliance — maintain SSP control narratives, collect evidence, and prepare for assessments
• Develop and deliver security awareness training and phishing simulation campaigns
• Lead or support incident response activities including containment, forensic analysis, root cause determination, and post-incident reporting
• Maintain and improve data loss prevention (DLP) controls for CUI and sensitive data
• Contribute to security policy development and keep documentation current as the environment evolves

Skills

• 5+ years of experience in information security or security engineering roles
• Strong hands-on experience with endpoint detection and response platforms (CrowdStrike, SentinelOne, or similar)
• Demonstrated experience managing enterprise vulnerability scanning tools (Tenable, Qualys, Rapid7, or similar)
• Deep understanding of identity and access management principles and hands-on Okta or Azure AD administration
• Proficiency with cloud security in AWS (IAM, VPC, Security Groups, CloudTrail, GuardDuty, Config)
• Experience with SIEM platforms (Splunk, Sentinel, Elastic, or similar) for log analysis and detection engineering
• Solid networking knowledge — firewalls, proxies, DNS security, network segmentation, packet analysis
• Familiarity with compliance frameworks such as NIST 800-171, CMMC, SOC 2, or ISO 27001
• Excellent written and verbal communication skills — able to convey risk and technical findings to both engineers and leadership
• Applicant must either be (A) a U.S. person, defined as a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (green card holder), (iii) refugee under 8 U.S.C. § 1157, or (iv) asylee under 8 U.S.C. § 1158, (B) eligible to access the export controlled information without a required export authorization, or (C) eligible and reasonably likely to obtain the required export authorization from the applicable U.S. government agency
• Relevant certifications (CISSP, GIAC, CEH, AWS Security Specialty, or similar)
• Experience with infrastructure-as-code security (Terraform, CloudFormation) and CI/CD pipeline security
• Background in environments subject to ITAR/EAR export control requirements

Benefits

• Full-time employees receive equity compensation.
• Full-time employees receive medical, dental, and vision insurance.
• Full-time employees receive a 401k retirement plan.
• Full-time employees receive short & long term disability and life insurance.
• Three weeks paid vacation for new employees.
• 12 paid holidays.
• Unlimited sick time.
• Paid parental leave.
• Hybrid work: on-site in the San Jose, CA office three days per week or fully remote from an approved U.S. location.

Company Overview

Company H1B Sponsorship