Enterprise Security Engineer

The Apex
Los Angeles, CA, United States
9 days ago
Apply on www.indeed.com
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Experienced
Experience required
3 years minimum
Compensation
$100,000.0 - $135,000.0
Working hours
Regular working hours
Job source

Tech stack

Kubernetes Security Active Directory Amazon Web Services Microsoft Azure Cloud Computing Cloud Computing Security Cloud Engineering Cyber Security Information Systems Computer Programming Computer Engineering Domain Name System Security Extensions
+44 more
Multi-Factor Authentication Identity and Access Management Intrusion Detection Systems Information Systems Security Architecture Professional Python (Programming Language) Network Security Network Segmentation OAuth Open Web Application Security Windows PowerShell Systems Development Life Cycle Remote Access Technology Azure Active Directory Zero Trust Network Access Sherwood Applied Business Security Architecture Security Assertion Markup Language (SAML) Secure Coding Security Information and Event Management Single Sign-On Software Engineering TCP/IP Software Vulnerability Management EndPointSecurity Apex Code Scripting Google Cloud Cloud Platform System Software Security Mitre Att&ck Multi-Cloud Cyber Threat Analysis Firewalls (Computer Science) Cloudformation Information Technology Cybercrime CIS Benchmarks Restful APIs Terraform Splunk Devsecops Security Orchestration, Automation & Response Static Application Security Testing Vulnerability Analysis Dynamic Application Security Testing

Job description

The Enterprise Security Engineer is responsible for designing, implementing, and maintaining secure enterprise architectures, systems, applications, networks, and cloud environments. This role provides technical leadership in cybersecurity strategy, risk management, security engineering, and compliance initiatives while ensuring Apex’s information assets are protected against evolving cyber threats., Security Architecture & Design

  • Design and maintain enterprise-wide cybersecurity architecture aligned with business and technology strategies.
  • Develop secure architectures for cloud, on-premises, hybrid, and multi-cloud environments.
  • Create and maintain security standards, reference architectures, and technical design documents.

  • Perform threat modeling and security architecture reviews for new systems, applications, and infrastructure.
  • Evaluate emerging technologies and recommend security controls and solutions.

Security Engineering & Implementation

  • Design, implement, and optimize security controls across networks, systems, endpoints, applications, and cloud platforms.
  • Lead deployment and integration of security technologies including SIEM, IDS/IPS, DLP, EDR/XDR, IAM, and vulnerability management platforms.
  • Develop and automate security processes using scripting and infrastructure-as-code methodologies.
  • Collaborate with infrastructure, application development, and cloud engineering teams to embed security into technology solutions.

Risk Management & Compliance

  • Conduct security risk assessments, vulnerability assessments, and security audits.
  • Identify security gaps and develop remediation strategies.
  • Ensure compliance with applicable regulatory and industry frameworks, including:
  • NIST 800-53
  • NIST 800-171/172
  • ISO 27001
  • CIS Controls
  • SOC 2
  • Support governance, risk, and compliance (GRC) initiatives.

Incident Response & Security Operations

  • Provide architectural guidance during cybersecurity incidents and investigations.
  • Support incident response, threat hunting, and forensic analysis activities.
  • Review security events and identify opportunities to strengthen defensive capabilities.
  • Assist in developing cyber resilience and business continuity strategies.

Leadership & Collaboration

  • Serve as a cybersecurity subject matter expert for technical and business stakeholders.
  • Mentor junior cybersecurity engineers, analysts, and administrators.
  • Present security recommendations, risk assessments, and strategic initiatives to leadership.
  • Partner with IT, engineering, operations, legal, and compliance teams to support enterprise security objectives.

Requirements

The ideal candidate combines deep technical expertise with strong business acumen to develop security solutions that align with organizational objectives, regulatory requirements, and industry best practices., Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Information Systems, Computer Engineering, or a related technical field.

Preferred

Master’s degree in Cybersecurity, Information Security, Computer Science, or related

discipline.

Professional Certifications (Preferred)

One or more of the following:

  • CISSP (Certified Information Systems Security Professional)
  • CISM (Certified Information Security Manager)
  • CCSP (Certified Cloud Security Professional)
  • SABSA Security Architecture Certification
  • AWS Certified Security - Specialty
  • Microsoft Azure Security Engineer Associate
  • GIAC Security Certifications (GIAC, GSEC, GDSA, etc.), * 7-10+ years of experience in cybersecurity, information security, network security, cloud security, or related IT disciplines.
  • 3-5+ years of experience designing security architectures or leading cybersecurity engineering initiatives.
  • Experience implementing enterprise security controls and security frameworks.
  • Experience securing cloud platforms such as AWS, Azure, or Google Cloud Platform., * Enterprise Security Architecture
  • Zero Trust Architecture
  • Secure-by-Design Principles
  • Threat Modeling
  • Security Control Design
  • Security Roadmap Development

Network & Infrastructure Security

  • Firewalls
  • IDS/IPS
  • VPN Technologies
  • Network Segmentation
  • DNS Security
  • TCP/IP Protocols
  • Secure Network Design

Cloud Security

  • AWS Security Services
  • Microsoft Azure Security Services
  • Google Cloud Security
  • Container Security
  • Kubernetes Security
  • Infrastructure as Code (Terraform, CloudFormation)

Identity & Access Management

  • Active Directory
  • Entra ID (Azure AD)
  • Single Sign-On (SSO)
  • Multi-Factor Authentication (MFA)
  • OAuth
  • SAML
  • Privileged Access Management (PAM)

Security Operations

  • SIEM Platforms (Elastic,Splunk)
  • Endpoint Detection & Response (EDR/XDR)
  • Vulnerability Management
  • Security Monitoring
  • Threat Intelligence
  • Incident Response

Application Security

  • Secure SDLC
  • DevSecOps
  • Application Security Testing (SAST/DAST)
  • API Security
  • OWASP Top 10
  • Secure Coding Practices

Programming & Automation

  • Python
  • PowerShell
  • Bash/Shell Scripting
  • REST APIs
  • Security Automation

Required Soft Skills

  • Strategic thinking and problem-solving
  • Strong analytical and risk assessment capabilities
  • Excellent written and verbal communication skills
  • Ability to communicate complex technical concepts to non-technical audiences
  • Leadership and mentoring skills
  • Project and stakeholder management
  • Cross-functional collaboration
  • Decision-making under pressure
  • Strong documentation and presentation skills, * Experience with large-scale enterprise environments.
  • Experience in regulated industries (financial services, healthcare, government, aerospace, defense, etc.).
  • Experience with cloud-native security and DevSecOps practices.
  • Knowledge of MITRE ATT&CK framework and threat intelligence methodologies.
  • Experience supporting security audits and compliance assessments.
  • Experience designing resilient and highly available security architectures.

Benefits & conditions

4.04.0 out of 5 stars Los Angeles, CA $100,000 - $135,000 a year - Full-time, Pulled from the full job description

  • Paid parental leave
  • Parental leave
  • Health insurance
  • 401(k) matching
  • Paid time off
  • Vision insurance
  • Dental insurance, * Shared upside: Receive equity in Apex, letting you benefit from the work you create
  • Best-in-class healthcare: 100% company-paid medical, dental, and vision for you and your dependents, plus $100k life insurance at no cost
  • Comprehensive PTO package to reset and recharge - starting at 15 days vacation, growing to 20+ days annually, plus 10 paid holidays
  • Competitive 401(k) plan with generous matching - 100% match on first 3%, 50% on next 2%
  • 8 weeks paid parental leave plus childcare reimbursement up to $350/day for work-related travel
  • Daily catered lunch and unlimited snacks to keep you fueled throughout the day
  • Vibrant community: Monthly office socials, pickleball tournaments, run club, and gatherings for you and your family
  • Your dream desk setup and all the tools you need to be your most productive self
  • World-class Playa Vista office with the benefit of in-person collaboration with amazing coworkers and flexibility to integrate work and life
  • Real impact opportunity: Work alongside experts from aerospace, new space, and other cutting-edge industries to make a lasting difference

Ready to join a team where your contributions matter and your future is bright? Let’s build something extraordinary together.

About the company

Spacecraft represent the most pressing unmet need across the entire aerospace industry. As more launch vehicles come online and the cost to orbit decreases, more companies launching payloads to space continue to emerge.

For the first time in history, this influx of payload companies combined with reduced launch costs has resulted in a massive increase in need for commercial spacecraft platforms, known as satellite buses. These buses hold the payloads of our customers and are flown on launch vehicles.

Apex manufactures these satellite buses at scale using a combination of software, vertical integration, and hardware that is designed for manufacturing. Our spacecraft enable the future of society: ranging from earth observation to communications and more.

We’d love for you to join us on our mission of providing humankind access to the galaxy beyond our planet., Apex believes in creating a work environment that you look forward to embracing every day. Our employees love working at Apex, and we want you to love it too. We’re a fast-growing startup that has raised more than $500M in funding, and we invest heavily in our people from day one.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.indeed.com
Prepare application

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

4:01 min

Finding personal fulfillment in the cybersecurity industry

LIVE

2:38 min

Establishing comprehensive monitoring and log management

Michael Eder +1 · LIVE

5:02 min

Mapping distributed compute paradigms to modern vehicles

Joachim Werner · LIVE

2:49 min

Adopting OAuth best practices and removing outdated grants

Alexander Schwartz Alexander Schwartz · World Congress 2026 Europe

3:22 min

Transitioning from software engineering to security roles

Anna Oliveira · Coffee With Developers

3:10 min

Correlating dispersed logs using structured request tracing

Michael Eder +1 · LIVE

Videos

See all

Related articles

See all