{"id":3845665,"url":"https://alion.io/job/intuitive-machines-platform-security-automation-engineer","title":"Platform - Security Automation Engineer","company":{"id":176585,"name":"Intuitive Machines","domain":"intuitivemachines.com","url":"https://alion.io/company/intuitive-machines","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Palo Alto, United States","United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":102000,"max":170000,"currency":"USD","period":"year","gross":null,"usd_annual":170000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"Cilium","optional":false},{"name":"Cilium Tetragon","optional":false},{"name":"CMMC","optional":false},{"name":"eBPF","optional":false},{"name":"Kubernetes","optional":false},{"name":"Kyverno","optional":false},{"name":"NIST 800-171","optional":false},{"name":"Python","optional":false},{"name":"SBOM","optional":false},{"name":"Wiz","optional":false},{"name":"ArgoCD","optional":true},{"name":"FedRAMP","optional":true},{"name":"GitOps","optional":true},{"name":"Grafana","optional":true},{"name":"Open Policy Agent","optional":true},{"name":"SIEM","optional":true},{"name":"Sigstore","optional":true},{"name":"SLSA","optional":true},{"name":"Snyk","optional":true},{"name":"Splunk","optional":true},{"name":"Trivy","optional":true},{"name":"Zero Trust","optional":true}],"status":"live","first_seen_at":"2026-11-05T00:00:00Z","employer_posted_date":"2026-11-05","last_verified_at":"2026-11-08T00:47:37Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"Please review the job details below.\n\nLanteris Space LLC, a wholly owned subsidiary of Intuitive Machines, is hiring a Security Automation Engineer to design, implement, and maintain security controls and automation across our platform infrastructure. This role can be based in our Palo Alto, CA office or remotely in the US. You will work with Cilium/Tetragon for runtime security, Kyverno for policy enforcement, Wiz for cloud security posture management, and implement vulnerability management and software supply-chain security practices.\nAs a member of our platform team, you'll enforce security policies in Kubernetes environments, automate security controls, ensure CMCC Level 2 and ITAR compliance, manage vulnerability remediation workflows, and protect the software supply chain that supports spacecraft development and mission operations.\nIntuitive Machines is a leading space infrastructure company that builds spacecraft, connects networks, and operates infrastructure-as-a-service for commercial, civil, and national security customers. With a proven track record across the space domain, the Company, through organic growth and portfolio expansion, has built over 300 spacecraft, delivered over 260 kilograms of payload to the lunar surface, and provided precision navigation expertise that has guided spacecraft across our solar system.\nPrincipal Responsibilities\nDesign and implement runtime security controls using Cilium for network policies and Tetragon for eBPF-based security observability and enforcement\nDevelop and maintain Kyverno policies for Kubernetes admission control, resource validation, and security policy enforcement\nConfigure and manage Wiz for cloud security posture management, vulnerability scanning, and compliance monitoring across AWS environments\nImplement and maintain vulnerability management programs including scanning, prioritization, remediation tracking, and reporting\nDesign and enforce software supply-chain security controls including container image signing, SBOM generation, and artifact verification\nAutomate security workflows including vulnerability remediation, policy enforcement, and compliance reporting\nMonitor security events and alerts from Cilium, Tetragon, Wiz, and other security tools\nCollaborate with development teams to integrate security controls into CI/CD pipelines\nEnsure compliance with CMMC Level 2, ITAR, and NIST 800-171 security requirements\nConduct security assessments of infrastructure and applications, providing remediation guidance\nCreate and maintain security documentation including runbooks, policies, and incident response procedures\nParticipate in security incident response and post-incident analysis\nMinimum Requirements\nUS Citizen or permanent resident\nBachelor's degree in Computer Science, Cybersecurity, or related discipline, four additional years of experience may be substituted for a degree\nMinimum of 5 years of relevant industry experience in security engineering or DevSecOps\nExperience with Kubernetes security including network policies, pod security standards, and admission controllers\nExperience with at least two of the following: Cilium/Tetragon, Kyverno, or similar policy/security enforcement tools\nExperience with vulnerability management tools and processes including scanning, assessment, and remediation tracking\nExperience implementing security controls in CI/CD pipelines\nExperience in container security best practices\nExperience with cloud security in AWS environments\nScripting and automation skills in Python, Bash, or Go\nUnderstanding of compliance frameworks (CMMC, NIST 800-171, or similar)\nPreferred Qualifications\nSecurity certifications such as CISSP, CCSP, CKS (Certified Kubernetes Security Specialist), or CEH\nExperience with Wiz or similar cloud security posture management (CSPM) platforms\nExperience with Cilium for Kubernetes networking and Tetragon for runtime security enforcement\nExperience with Kyverno or OPA (Open Policy Agent) for policy-as-code\nExperience implementing software supply-chain security including SLSA framework, Sigstore, or similar\nExperience with container image scanning tools (Trivy, Black Duck, Snyk, Aqua)\nExperience in aerospace, defense, or government sectors with ITAR or CUI environments\nExperience implementing CMMC Level 2 or FedRAMP security controls\nExperience with eBPF-based security tools and observability\nExperience with SBOM (Software Bill of Materials) generation and analysis\nKubernetes certifications (CKA, CKAD, CKS)\nExperience with GitOps security practices (ArgoCD, Flux)\nExperience with AWS security services (GuardDuty, Security Hub, Inspector, Config)\nExperience with observability and SIEM tools (Grafana, Splunk, Cribl)\nExperience with zero-trust architecture and micro-segmentation\nExperience with security automation frameworks and orchestration\n\nIn support of pay transparency at Lanteris Space Systems, we disclose salary ranges on all U.S. job postings. The successful candidate’s starting pay will fall within the salary range provided below and is determined based on job-related factors, including, but not limited to, the experience, qualifications, knowledge, skills, geographic work location, and market conditions. Candidates with the minimum necessary experience, qualifications, knowledge, and skillsets for the position should not expect to receive the upper end of the pay range.\n\n•The base pay for this position within Colorado is: $102,000.00 - $170,000.00 annually.•The base pay for this position within New Jersey is: $102,000.00 - $170,000.00 annually.•The base pay for this position within Delaware is: $102,000.00 - $170,000.00 annually.•The base pay for this position within the Washington, DC metropolitan area is: $113,000.00 - $188,000.00 annually.•The base pay for this position within California is: $117,000.00 - $195,000.00 annually.\n\nFor all other states, we use geographic cost of labor as an input to develop market-driven ranges for our roles, and as such, each location where we hire may have a different range.\nWe offer a comprehensive package of benefits including paid time off, health and welfare insurance, and 401(k) to eligible employees. More information on our benefits will be shared with candidates as they move forward in the recruitment process.\nThe application window is three days from the date the job is posted and will remain posted until a qualified candidate has been identified for hire. If the job is reposted regardless of reason, it will remain posted three days from the date the job is reposted and will remain reposted until a qualified candidate has been identified for hire.\nThe date of posting can be found on the Lanteris Space Systems Career page at the top of each job posting.\nTo apply, submit your application via the Lanteris Space Systems Career page.\n\nLanteris Space Systems values diversity in the workplace and is an equal opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected veteran status, age, or any other characteristic protected by law.","description_format":"text","description_chars":7186,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Space Services"],"lifecycle":[{"event":"open","at":"2026-11-06T00:40:28Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":2,"expected_fill_days":30,"reasons":["conf:8","velocity","win:early"],"computed_at":"2026-11-07T05:47:08Z"},"pay":{"stated_usd_annual":170000,"is_top_pay":true},"html_url":"https://alion.io/job/intuitive-machines-platform-security-automation-engineer","json_url":"https://alion.io/job/intuitive-machines-platform-security-automation-engineer.json","meta":{"generated_at":"2026-11-08T04:34:12Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9869,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-09T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":176585},"rest":"https://alion.io/mcp/rest/get_company?id=176585"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fintuitive-machines-platform-security-automation-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fintuitive-machines-platform-security-automation-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fintuitive-machines-platform-security-automation-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/intuitive-machines-platform-security-automation-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fintuitive-machines-platform-security-automation-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3845665}},{"tool":"search_jobs","arguments":{"company":"intuitivemachines.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3845665},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}