Senior Security Engineer

About Isar Aerospace Isar Aerospace is building the vehicles that will transform access to space. We develop, manufacture, and operate launch vehicles for small and medium-sized satellites, driven by the belief that space access is key to solving major challenges on Earth. Our team brings together top talent from across the globe to build reliable, cost-effective, and autonomous launch systems.

About the role You are the guardian and the challenger of our security posture. At Isar Aerospace, the systems that build our rockets and the ground systems that launch them are mission critical, and protecting them takes more than good design. It takes someone who will attack their own work to be sure it holds. We are looking for a deeply hands-on Senior Security Engineer. You live in the consoles, the rule sets and the code. You own our secure access and network security controls, our endpoint and identity security stack, and our detection content, operating them yourself rather than directing from the sidelines. You wear two hats: the Builder who implements and runs the controls that keep us safe, and the Adversary who tests whether those controls and detections actually fire. This is a senior engineering role with the spirit of an architect. You are expected to design what you operate, not just configure it: pick the pattern, write it down, and make it hold at fleet scale. You will be a versatile engineer with real depth, comfortable switching from a firewall rule set to a detection query to a directory hardening sprint in the same week, serving as a technical anchor others lean on.

Responsibilities

• Own and operate our SASE platform, revamping Internet Security and Private Access policies.

• Drive firewall security with the network team: own segmentation strategy, analyze rule sets, identify gaps, and see remediation through.

• Coordinate firewall-adjacent controls including IPS, AV, sandboxing, and DDoS protection, alongside DNS security and edge WAF solutions.

• Apply CIS Benchmarks to raise posture across firewalls, endpoints, cloud identity platforms, and productivity suites.

• Lead the clean-up and hardening of on-premises and cloud identity directories with the infrastructure team.

• Drive phishing-resistant MFA and privileged access programmes, including just-in-time elevation and attack path remediation.

• Own certificate lifecycle and PKI operations, including key ceremonies, automated renewal, and post-quantum migration input.

• Manage and tune IPS/IDS platforms, write custom signatures, operate network sensors for NTA appliances, and build SIEM detections using MITRE ATT&CK.

• Extend visibility into OT with purpose-built OT monitoring tooling.

• Act as an L3 incident responder, turning every finding into a fix, detection, or hardened configuration.

• Act as the technical owner for endpoint detection and response, data protection, and CASB platforms, and script internal tooling in PowerShell and Python.

• Run threat modeling and attack-path analysis on owned systems, document standards, evaluate tooling, and embed security across IT, infrastructure, manufacturing, and mission teams.

You may be a good fit if you have

• 10+ years in security engineering with real ownership of production security tooling, not just policy or advisory work.

• Architect spirit: ability to step back from the console, design target states, write patterns down, and build them yourself.

• Hands-on enterprise SASE administration experience from end to end.

• Experience applying CIS Benchmarks in production and rolling out phishing-resistant MFA or privileged access management.

• Solid networking and firewall fundamentals, segmentation strategy ownership, and experience with CDN-based WAF and edge protection.

• Background across EDR, data protection, SIEM, query languages, directory hardening, and PKI operations.

• Practical MITRE ATT&CK detection work and custom IDS/IPS signature writing experience.

• Strong operational depth in detection, incident response, vulnerability management, and scripting with PowerShell and Python.

• Comfort across IT and OT environments, with working knowledge of OT protocols and monitoring as a strong plus.

• High autonomy, strong mentoring skills, and clear communication abilities.

• A Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field, or equivalent experience.

Benefits

• Employee Participation Program: Share in our success through our virtual company share program.

• 6 weeks of vacation: Enjoy time off to relax and recharge.

• Subsidised lunch: Stay energised with daily delicious, subsidised meals.

• Relocation support: Benefit from a relocation bonus with deductible expenses up to an agreed amount.

• Wellness allowance: Yearly allowance for wellness activities like gym memberships and massages.

• Individual learning allowance: Grow your skills with an individual learning budget after probation.

• Physical and mental well-being: Free access via OpenUp to certified lifestyle experts and psychologists for you and your family.