Work Across
Get started
All jobs
Save

Senior Security Engineer (m/f/d)

isaraerospace
Contract type
Ongoing
Work mode
Remote
Experience
Lead / principal · 10+ years

Job description

A hands-on Senior Security Engineer at Isar Aerospace who owns and operates security controls across SASE, network security, identity, endpoint and detection, while also acting as an adversary testing whether those controls hold. The role combines building and running production security tooling with designing target-state patterns at fleet scale.

At a glance

Work mode
Remote

What you'll do

  • Own and operate the SASE platform, including revamping Internet Security policies and redefining Private Access policies
  • Drive firewall security with the network team: own network security engineering and segmentation strategy, analyze rule sets, identify gaps, and see remediation through with network engineering, who own the devices
  • Coordinate firewall-adjacent controls: IPS, AV, sandboxing and DDoS protection
  • Manage DNS security and WAF solutions, including edge and CDN-based protection services
  • Apply CIS Benchmarks to raise posture across firewalls, endpoints, cloud identity platform and cloud productivity suite
  • Lead clean-up and hardening of on-premises and cloud identity directories with the infrastructure team, then keep both hardened
  • Drive phishing-resistant MFA and privileged access programme, including just-in-time elevation and remediation of attack paths
  • Own certificate lifecycle and PKI operations: key ceremonies, automated renewal, and input to the post-quantum migration plan
  • Manage and tune IPS/IDS platforms; write and maintain custom IDS signatures and operate network sensors for NTA appliances
  • Build and maintain detections in the SIEM and apply MITRE ATT&CK to detection engineering and use-case design in support of the SOC
  • Extend visibility into OT with purpose-built OT monitoring tooling
  • Act as an L3 incident responder for escalated security events and turn findings into fixes, new detections or hardened configurations
  • Own endpoint detection and response, data protection and CASB platforms as their technical owner
  • Script and build internal tooling in PowerShell and Python so controls and checks run themselves
  • Run threat modeling and attack-path analysis on owned systems, choose the pattern, and document standards others can execute against
  • Evaluate tooling and support vendor selection and renewal decisions in the domain
  • Partner with IT, infrastructure, manufacturing and mission teams to implement and validate controls across IT and OT, respecting launch-window and change-freeze constraints and producing audit evidence

What we're looking for

  • 10+ years in security engineering, with real ownership of production security tooling, not policy or advisory work
  • Ability to design the target state, write the pattern down, and then build it yourself
  • Hands-on experience administering an enterprise SASE platform end to end, not just consuming it
  • Experience applying CIS Benchmarks to firewalls, endpoints, cloud identity and cloud productivity platforms in production, plus experience rolling out phishing-resistant MFA or privileged access management
  • Solid networking and firewall fundamentals, enough to own segmentation strategy and drive rule set analysis and gap remediation with a network team that owns the devices
  • Experience with CDN-based WAF and edge protection services
  • Strong background across endpoint detection and response, data protection, SIEM and detection query languages, cloud identity and on-premises directory hardening, certificate lifecycle and PKI operations, ideally including a large-scale directory clean-up or remediation effort
  • Practical MITRE ATT&CK-driven detection work, and experience writing custom IDS/IPS signatures
  • Strong capability in detection, incident response and vulnerability management, with time spent on escalated incidents
  • Scripting ability in PowerShell and Python, plus infrastructure-as-code and policy-as-code experience
  • Comfortable working across both IT and OT
  • Operates with very high autonomy as an internal expert, taking full ownership of their work and guiding others
  • Mentors engineers and analysts on the team, and acts as technical lead in cross-functional projects
  • Clear communication and collaboration skills, able to translate technical risk for a range of audiences and to work controls through other teams
  • Bachelor's or Master's degree in Computer Science, Information Security, or a related field, or the equivalent through relevant certifications and hands-on experience

Nice to have

  • Working knowledge of OT protocols such as EtherNet/IP, OPC UA and Modbus, and familiarity with OT network monitoring
  • Experience in aerospace, defense, energy, manufacturing or other OT-heavy, safety-critical environments
  • Prior SOC or incident response team experience
  • Cloud security depth in a major public cloud and its native security services
  • Familiarity with industry standards such as ISO 27001 and NIST
  • Relevant certifications, defensive or engineering (e.g., Security+, GCIA) and offensive (e.g., OSCP or equivalent)

Benefits

Physical and mental well-being: online support from certified psychologists and lifestyle experts via OpenUp at no cost to you and your family

  • Employee Participation Program: share in success through the virtual company share program
  • 6 weeks of vacation
  • Subsidised lunch every day
  • Relocation support: relocation bonus with deductible expenses up to an agreed amount
  • Wellness allowance: yearly allowance for wellness activities (e.g., Gym, Massages)
  • Individual learning allowance granted after the probation period
  • Additional perks and benefits

Apply

Save

Direct apply at isaraerospace

Opens the job posting at isaraerospace

About Isar Aerospace

Building a modern space business to enable faster, better and cheaper access to space

Isar Aerospace is at the forefront of New Space, building a modern space business to enable faster, better and cheaper access to space. The company aims to provide sustainable and environmentally friendly launch solutions for small and medium-sized satellites and constellations into Low Earth Orbit, and is privately funded by world-leading technology investors.

Mission

To help democratise space and use it for good in order to improve life on Earth now and for the future generations

Key facts

  • Space / aerospace launch
  • At the forefront of New Space
  • Aiming to provide sustainable and environmentally friendly launch solutions for small and medium-sized satellites and constellations into Low Earth Orbit
  • Privately funded by world-leading technology investors
  • Approaching its first orbital launch
  • Disrupting a traditional industry

What they value

  • Fairness and inclusivity
  • Passion for space innovation