{"id":79196,"url":"https://alion.io/job/northwood-space-security-engineering-manager","title":"Security Engineering Manager","company":{"id":6433,"name":"Northwood Space","domain":"northwoodspace.com","url":"https://alion.io/company/northwoodspace","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":79,"open_postings":7,"ghost_share":0,"stale_share":0.857,"repost_share":0,"time_to_fill_p50_days":46,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Leadership","role_family":"Leadership","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Los Angeles, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":156000,"max":232000,"currency":"USD","period":"year","gross":null,"usd_annual":232000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Ansible","optional":false},{"name":"AWS","optional":false},{"name":"Cloudflare","optional":false},{"name":"DLP","optional":false},{"name":"FedRAMP","optional":false},{"name":"FortiGate","optional":false},{"name":"NIST 800-171","optional":false},{"name":"NIST 800-53","optional":false},{"name":"Okta","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Terraform","optional":false},{"name":"VPN","optional":false},{"name":"Zero Trust","optional":false},{"name":"Crowdstrike","optional":true},{"name":"Microsoft Sentinel","optional":true},{"name":"SentinelOne","optional":true},{"name":"Splunk","optional":true}],"status":"live","first_seen_at":"2026-06-19T22:36:47Z","employer_posted_date":"2026-06-19","last_verified_at":"2026-10-17T18:15:04Z","board_verified":true,"closed_at":null,"days_open":119,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":119},"description":"About Northwood:\nNorthwood is a modern space infrastructure company bringing the benefits of space to the masses through advanced communications technology. We are building a global network of phased array ground stations that enable real-time, reliable communication for satellite missions such as national security, global connectivity, and disaster response. With a vertically integrated approach, Northwood designs, builds, and rapidly deploys scalable systems that power the next generation of space missions. If you like solving complex challenges and seeing your work deployed around the world with real impact, Northwood is the place to do it.\nRole:\nAs Security Engineering Lead, you will design, build, and own the security infrastructure that protects Northwood's ground station network, cloud environments, and corporate systems. This is a senior technical leadership role for an engineer who is equally at home architecting security platforms and mentoring a growing team.\nYou will lead the buildout of our SIEM and EDR capabilities, own corporate network security infrastructure including firewall management, and drive secure deployments across on-premises environments and AWS GovCloud and Microsoft GCC. You will define how Northwood engineers and operates security infrastructure at a scale and sensitivity level that does not exist elsewhere in the commercial space industry. This role reports to the Head of Security.\nResponsibilities\nSIEM & Detection Engineering\nOwn the full lifecycle of Northwood's SIEM platform - architecture, log source onboarding across ground stations and cloud infrastructure, correlation rule development, tuning, and automated alerting.\n\nBuild and maintain EDR platform operations, including agent deployment, policy management, alert triage, and integration with SIEM workflows.\n\nDevelop and continuously improve detection content, incident response playbooks, and SOC processes for a distributed, mission-critical environment.\n\nIntegrate security tooling with broader infrastructure through APIs and automation, reducing manual operational burden over time.\n\nLead the deployment and ongoing tuning of User and Entity Behavior Analytics (UEBA) capabilities within the SIEM environment, establishing behavioral baselines and refining detection models to surface insider threats and anomalous activity.\n\nDevelop and maintain UEBA use cases, correlation rules, and risk scoring models, working closely with the SOC to ensure alerts are actionable and high-fidelity.\n\nAnalyze UEBA telemetry to identify patterns indicative of insider risk, compromised accounts, or policy violations, and drive remediation in coordination with HR, legal, and security leadership.\n\nNetwork & Infrastructure Security\nManage and maintain FortiGate firewall infrastructure, including policy management, segmentation, firmware lifecycle, and log integration.\n\nAdminister and optimize Cloudflare VPN and Zero Trust Network Access (ZTNA) configurations to support secure remote access and site connectivity.\n\nDeploy, harden, and maintain security infrastructure across on-premises environments and AWS GovCloud and Microsoft GCC, adhering to applicable compliance frameworks.\n\nPartner with product infrastructure engineers to ensure security is embedded in network and system architecture from the ground up.\n\nDeploy and manage email security infrastructure, including administration of platforms such as Proofpoint or Sublime Security, policy tuning, threat response, and integration with SIEM workflows.\n\n DLP Policy & Controls\n· Design, implement, and maintain Data Loss Prevention (DLP) policies across endpoint, network, and cloud environments to protect sensitive data in alignment with CMMC and NIST 800-53 control requirements.\n· Develop and enforce DLP rules and rulesets across email, web, and SaaS platforms, continuously tuning policies to reduce false positives while maintaining strong data protection coverage.\n· Partner with legal, compliance, and IT teams to classify data assets and translate classification requirements into enforceable DLP controls across the enterprise.\nIdentity & Access\nSupport Okta administration in coordination with the IT operations team, including SSO integrations, MFA policy enforcement, lifecycle management, and SIEM log ingestion.\n\nEnsure routine integrations between identity, endpoint, and security tooling are maintained as new systems are onboarded - this role is not responsible for general IT helpdesk or end-user support operations.\n\nInfrastructure as Code & Automation\nDefine and enforce IaC practices (Terraform, Ansible, or equivalent) for all security infrastructure deployments, ensuring repeatability, auditability, and compliance alignment.\n\nDevelop scripting and automation (Python, Bash, PowerShell) to operationalize security workflows, reduce toil, and support compliance evidence collection.\n\nTeam Leadership\nHire, mentor, and develop security engineers as the team scales.\n\nServe as the primary security engineering subject-matter expert in cross-functional collaboration with network operations, mission management, and product engineering teams.\n\nContribute to security architecture reviews and provide technical guidance on regulatory requirements including CMMC, NIST 800-171, and FedRAMP.\n\nBasic Qualifications\n5+ years in security engineering or DevSecOps with demonstrated experience in a technical leadership capacity.\n\nHands-on experience building and operating SIEM platforms, including log ingestion, detection rule development, and alert management.\n\nExperience deploying and managing EDR solutions in a production environment.\n\nDemonstrated FortiGate administration experience, including firewall policy management and network segmentation.\n\nExperience deploying and securing workloads in AWS GovCloud and/or Microsoft GCC environments.\n\nProficiency with Infrastructure as Code tooling (Terraform, Ansible, or equivalent) applied to security infrastructure.\n\nExperience administering Okta, including SSO, MFA, lifecycle management, and SIEM integration.\n\nFamiliarity with compliance frameworks relevant to defense and government environments (CMMC, NIST 800-171, FedRAMP).\n\nAbility to obtain and maintain a TS/SCI clearance.\n\nU.S. citizenship or status as a lawful permanent resident required to conform with ITAR export regulations.\n\nPreferred Qualifications\nActive TS clearance or higher.\n\nExperience with Cloudflare Zero Trust / ZTNA configuration and administration.\n\nHands-on experience with SIEM platforms such as Splunk, Microsoft Sentinel, or Panther.\n\nExperience with EDR platforms such as CrowdStrike Falcon or SentinelOne.\n\nExperience building and maintaining User and Entity Behavior Analytics (UEBA) capabilities for insider risk detection, including rule development, baselining, and integration with SIEM or dedicated UEBA platforms.\n\nBackground in aerospace, defense, critical infrastructure, or other regulated industries.\n\nITAR compliance experience.\n\nCISSP, CISM, CISA, or equivalent professional certification.\n\nAdditional Requirements:\nThis position requires successfully obtaining and maintaining a Top Secret Security Clearance as a condition of employment. While the clearance may not be immediately necessary upon hire, we encourage you to initiate the application process promptly upon accepting this offer. Your ability to secure the necessary clearance is essential for fulfilling key responsibilities of the role. Should you be unable to obtain it, Northwood Space reserves the right to modify or terminate your employment to align with optional needs.\n\nAdditional Information:\nIf you need a reasonable accommodation as part of your application for employment or interviews with us, please let us know.\nTo conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR) you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State.\nNorthwood Space is an Equal Opportunity Employer; employment with Northwood Space is governed on the basis of merit, competence and qualifications and will not be influenced in any manner by race, color, religion, gender, national origin/ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability or any other legally protected status.","description_format":"text","description_chars":8484,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":true,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Satellite Communications","Ground Systems"],"lifecycle":[{"event":"open","at":"2026-06-19T22:36:47Z"}],"visa":[],"liveness":{"score":15,"band":"cold","label":"Long shot","p_open":1,"p_active":0.552,"p_room":0.28,"age_days":119,"expected_fill_days":46,"reasons":["conf:0","velocity","win:tail","crowd:"],"computed_at":"2026-10-17T05:46:00Z"},"pay":{"stated_usd_annual":232000,"is_top_pay":true},"html_url":"https://alion.io/job/northwood-space-security-engineering-manager","json_url":"https://alion.io/job/northwood-space-security-engineering-manager.json","meta":{"generated_at":"2026-10-17T19:36:07Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2948,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":6433},"rest":"https://alion.io/mcp/rest/get_company?id=6433"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnorthwood-space-security-engineering-manager"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnorthwood-space-security-engineering-manager"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnorthwood-space-security-engineering-manager"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/northwood-space-security-engineering-manager\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnorthwood-space-security-engineering-manager"}]}