Enterprise Security Engineer

About the company

Apex is a space startup that manufactures satellite buses and is involved in missile defense collaborations.

About this role

Spacecraft represent the most pressing unmet need across the entire aerospace industry. As more launch vehicles come online and the cost to orbit decreases, more companies launching payloads to space continue to emerge. For the first time in history, this influx of payload companies combined with reduced launch costs has resulted in a massive increase in need for commercial spacecraft platforms, known as satellite buses. These buses hold the payloads of our customers and are flown on launch vehicles. Apex manufactures these satellite buses at scale using a combination of software, vertical integration, and hardware that is designed for manufacturing. Our spacecraft enable the future of society: ranging from earth observation to communications and more. We’d love for you to join us on our mission of providing humankind access to the galaxy beyond our planet.  ABOUT THE ROLE The Enterprise Security Engineer is responsible for designing, implementing, and maintaining secure enterprise architectures, systems, applications, networks, and cloud environments. This role provides technical leadership in cybersecurity strategy, risk management, security engineering, and compliance initiatives while ensuring Apex's information assets are protected against evolving cyber threats. The ideal candidate combines deep technical expertise with strong business acumen to develop security solutions that align with organizational objectives, regulatory requirements, and industry best practices. ESSENTIAL DUTIES AND RESPONSIBILITIES Security Architecture & Design - Design and maintain enterprise-wide cybersecurity architecture aligned with business and technology strategies. - Develop secure architectures for cloud, on-premises, hybrid, and multi-cloud environments. - Create and maintain security standards, reference architectures, and technical design documents. - Perform threat modeling and security architecture reviews for new systems, applications, and infrastructure. - Evaluate emerging technologies and recommend security controls and solutions. Security Engineering & Implementation - Design, implement, and optimize security controls across networks, systems, endpoints, applications, and cloud platforms. - Lead deployment and integration of security technologies including SIEM, IDS/IPS, DLP, EDR/XDR, IAM, and vulnerability management platforms. - Develop and automate security processes using scripting and infrastructure-as-code methodologies. - Collaborate with infrastructure, application development, and cloud engineering teams to embed security into technology solutions. Risk Management & Compliance - Conduct security risk assessments, vulnerability assessments, and security audits. - Identify security gaps and develop remediation strategies. - Ensure compliance with applicable regulatory and industry frameworks, including: - NIST 800-53 - NIST 800-171/172 - ISO 27001 - CIS Controls - SOC 2 - Support governance, risk, and compliance (GRC) initiatives. Incident Response & Security Operations - Provide architectural guidance during cybersecurity incidents and investigations. - Support incident response, threat hunting, and forensic analysis activities. - Review security events and identify opportunities to strengthen defensive capabilities. - Assist in developing cyber resilience and business continuity strategies. Leadership & Collaboration - Serve as a cybersecurity subject matter expert for technical and business stakeholders. - Mentor junior cybersecurity engineers, analysts, and administrators. - Present security recommendations, risk assessments, and strategic initiatives to leadership. - Partner with IT, engineering, operations, legal, and compliance teams to support enterprise security objectives. EDUCATION REQUIREMENTS Required Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Systems, Computer Engineering, or a related technical field. Preferred Master's degree in Cybersecurity, Information Security, Computer Science, or related discipline. Professional Certifications (Preferred) One or more of the following: - CISSP (Certified Information Systems Security Professional) - CISM (Certified Information Security Manager) - CCSP (Certified Cloud Security Professional) - SABSA Security Architecture Certification - AWS Certified Security – Specialty - Microsoft Azure Security Engineer Associate - GIAC Security Certifications (GIAC, GSEC, GDSA, etc.)   EXPERIENCE REQUIREMENTS - 7–10+ years of experience in cybersecurity, information security, network security, cloud security, or related IT disciplines. - 3–5+ years of experience designing security architectures or leading cybersecurity engineering initiatives. - Experience implementing enterprise security controls and security frameworks. - Experience securing cloud platforms such as AWS, Azure, or Google Cloud Platform. REQUIRED TECHNICAL SKILLS Security Architecture - Enterprise Security Architecture - Zero Trust Architecture - Secure-by-Design Principles - Threat Modeling - Security Control Design - Security Roadmap Development Network & Infrastructure Security - Firewalls - IDS/IPS - VPN Technologies - Network Segmentation - DNS Security - TCP/IP Protocols - Secure Network Design Cloud Security - AWS Security Services - Microsoft Azure Security Services - Google Cloud Security - Container Security - Kubernetes Security - Infrastructure as Code (Terraform, CloudFormation) Identity & Access Management - Active Directory - Entra ID (Azure AD) - Single Sign-On (SSO) - Multi-Factor Authentication (MFA) - OAuth - SAML - Privileged Access Management (PAM) Security Operations - SIEM Platforms (Elastic,Splunk) - Endpoint Detection & Response (EDR/XDR) - Vulnerability Management - Security Monitoring - Threat Int