Senior Information Security Engineer

$118,100 - $180,200/Yr

Virgin Galactic - Tustin, CA

Full-time - Senior

Remote - Tustin, CA

Air Transportation

About the position

At Virgin Galactic, we are at the forefront of commercial space travel, and we are seeking a Senior Security Engineer to join our team. This role is pivotal in leading the design, development, and implementation of network security solutions that protect our digital assets against the latest cybersecurity threats. The ideal candidate will possess a deep understanding of cybersecurity complexities and a passion for safeguarding our systems. You will be responsible for tuning tools and processes to ensure our infrastructure is secure, both on-premises and in the cloud, while adhering to policy and governance requirements. In this position, you will serve as an internal Subject Matter Expert (SME) on cyber threats, providing guidance and expertise to secure the organization. Your primary focus will be on Palo Alto firewalls and Panorama, where you will oversee the configuration, optimization, and maintenance of our firewall infrastructure. You will implement robust security policies, threat prevention measures, and access controls to enhance our network defenses. Additionally, you will drive the maturity of our security architecture and processes based on a zero-trust philosophy, collaborating with IT teams to optimize design and implementation. Your responsibilities will also include identifying gaps in our network infrastructure security and working with internal teams to remediate these issues promptly. You will develop foundational processes for a Red team/Blue team capability and act as the technical lead for the Incident Response team during incidents, making timely decisions regarding action plans. Staying current with the latest threats, technologies, and best practices in network security is essential, as is mentoring junior team members to help grow their skills. You will also be responsible for creating and maintaining high-quality documentation in Confluence and supporting leadership in meetings as needed.

Responsibilities

• Suggest strategies, evaluate solutions, design, and implement tools, processes, and controls to validate and ensure that security and privacy are designed into Virgin Galactic on-prem and cloud infrastructure and applications while adhering to policy and governance requirements
• Serve as an internal Subject Matter Expert (SME) to assess cyber threats and to secure the organization
• Oversee the configuration, optimization, and maintenance of our Palo Alto firewall infrastructure
• Implement robust security policies, threat prevention measures, and access controls to fortify our network defenses
• Drive maturity in security architecture and processes based on a zero-trust philosophy
• Identify gaps in network infrastructure security and work with internal teams on timely remediation
• Develop foundational processes for a Red team / Blue team capability
• Act as the technical lead for the Incident Response team during incidents
• Stay current with the latest threats/TTPs, technologies, and best practices in network security
• Mentor junior team members and help grow their knowledge and skills
• Create and maintain high quality documentation in Confluence
• Support and represent leadership in meetings as needed

Requirements

• 5+ years of hands-on experience in cybersecurity engineering with a focus on multi-site networks
• Extensive background in IT and networking, including skills in routing and switching, protocols such as OSPF and BGP, and virtual networks
• Solid understanding of zero trust concepts and implementation
• Experience working with services like MDR, MSSP, DFIR and Incident Response, pen testers, etc.
• Hands-on experience with core security infrastructure technologies such as SASE, NGFW, SIEM, CSPM, and authentication tools
• Experience working in a multi-cloud environment, preferably including Azure
• Strong analytical and problem-solving skills to assess complex security issues and develop effective solutions
• Excellent communication and collaboration skills, with the ability to convey technical concepts to both technical and non-technical stakeholders
• Ability to work self-directed in a fast-paced engineering-focused company
• Experience with programming or scripting is a plus, e.g. Python or PowerShell
• Demonstrated commitment to continuous learning and staying current with the latest trends, technologies, and best practices in cybersecurity

Nice-to-haves

• Bachelor's degree or higher (preferred but can be substituted with the right work experience)
• Preferred certifications include CISSP, CEH, Cisco CCNP, Palo Alto CNSE, or other relevant cybersecurity certifications

Benefits

• Medical, financial, and other benefits
• Training and professional development opportunities
• Flexible work arrangements (hybrid or fully remote)