> Markdown version of [/jobs/ext/4623267-platform-security-automation-engineer](https://www.wearedevelopers.com/jobs/ext/4623267-platform-security-automation-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Platform - Security Automation Engineer - **Company:** Lanteris Space LLC - **Location:** Palo Alto, CA, United States - **Experience:** Expert - **Salary:** $102,000 - $195,000 - **Contract:** Permanent contract - **Skills:** Kubernetes Security, Amazon Web Services, Bash Shell, Cloud Computing Security, Cyber Security, Computer Networks, Python (Programming Language), Network Segmentation, Zero Trust Network Access, Security Information and Event Management, Tripwire, Software Vulnerability Management, Policy as Code, Grafana, Kubernetes, Information Technology, Tenable Nessus, Splunk, Devsecops, Security Orchestration, Automation & Response, Vulnerability Analysis - **Published:** November 7, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=9bb8593c84edd5ed ## About the Role * US Citizen or permanent resident * Bachelor's degree in Computer Science, Cybersecurity, or related discipline, four additional years of experience may be substituted for a degree * Minimum of 5 years of relevant industry experience in security engineering or DevSecOps * Experience with Kubernetes security including network policies, pod security standards, and admission controllers * Experience with at least two of the following: Cilium/Tetragon, Kyverno, or similar policy/security enforcement tools * Experience with vulnerability management tools and processes including scanning, assessment, and remediation tracking * Experience implementing security controls in CI/CD pipelines * Experience in container security best practices * Experience with cloud security in AWS environments * Scripting and automation skills in Python, Bash, or Go * Understanding of compliance frameworks (CMMC, NIST 800-171, or similar), * Security certifications such as CISSP, CCSP, CKS (Certified Kubernetes Security Specialist), or CEH * Experience with Wiz or similar cloud security posture management (CSPM) platforms * Experience with Cilium for Kubernetes networking and Tetragon for runtime security enforcement * Experience with Kyverno or OPA (Open Policy Agent) for policy-as-code * Experience implementing software supply-chain security including SLSA framework, Sigstore, or similar * Experience with container image scanning tools (Trivy, Black Duck, Snyk, Aqua) * Experience in aerospace, defense, or government sectors with ITAR or CUI environments * Experience implementing CMMC Level 2 or FedRAMP security controls * Experience with eBPF-based security tools and observability * Experience with SBOM (Software Bill of Materials) generation and analysis * Kubernetes certifications (CKA, CKAD, CKS) * Experience with GitOps security practices (ArgoCD, Flux) * Experience with AWS security services (GuardDuty, Security Hub, Inspector, Config) * Experience with observability and SIEM tools (Grafana, Splunk, Cribl) * Experience with zero-trust architecture and micro-segmentation * Experience with security automation frameworks and orchestration In support of pay transparency at Lanteris Space Systems, we disclose salary ranges on all U.S. job postings. The successful candidate's starting pay will fall within the salary range provided below and is determined based on job-related factors, including, but not limited to, the experience, qualifications, knowledge, skills, geographic work location, and market conditions. Candidates with the minimum necessary experience, qualifications, knowledge, and skillsets for the position should not expect to receive the upper end of the pay range. ## Description Lanteris Space LLC, a wholly owned subsidiary of Intuitive Machines, is hiring a Security Automation Engineer to design, implement, and maintain security controls and automation across our platform infrastructure. This role can be based in our Palo Alto, CA office or remotely in the US. You will work with Cilium/Tetragon for runtime security, Kyverno for policy enforcement, Wiz for cloud security posture management, and implement vulnerability management and software supply-chain security practices. As a member of our platform team, you'll enforce security policies in Kubernetes environments, automate security controls, ensure CMCC Level 2 and ITAR compliance, manage vulnerability remediation workflows, and protect the software supply chain that supports spacecraft development and mission operations. Intuitive Machines is a leading space infrastructure company that builds spacecraft, connects networks, and operates infrastructure-as-a-service for commercial, civil, and national security customers. With a proven track record across the space domain, the Company, through organic growth and portfolio expansion, has built over 300 spacecraft, delivered over 260 kilograms of payload to the lunar surface, and provided precision navigation expertise that has guided spacecraft across our solar system. Principal Responsibilities * Design and implement runtime security controls using Cilium for network policies and Tetragon for eBPF-based security observability and enforcement * Develop and maintain Kyverno policies for Kubernetes admission control, resource validation, and security policy enforcement * Configure and manage Wiz for cloud security posture management, vulnerability scanning, and compliance monitoring across AWS environments * Implement and maintain vulnerability management programs including scanning, prioritization, remediation tracking, and reporting * Design and enforce software supply-chain security controls including container image signing, SBOM generation, and artifact verification * Automate security workflows including vulnerability remediation, policy enforcement, and compliance reporting * Monitor security events and alerts from Cilium, Tetragon, Wiz, and other security tools * Collaborate with development teams to integrate security controls into CI/CD pipelines * Ensure compliance with CMMC Level 2, ITAR, and NIST 800-171 security requirements * Conduct security assessments of infrastructure and applications, providing remediation guidance * Create and maintain security documentation including runbooks, policies, and incident response procedures * Participate in security incident response and post-incident analysis