Information Security Systems Engineer
Hands-on security engineer owning Stoke Space's information security program: designing, implementing, and maturing controls across cloud, on-prem, endpoint, network, and manufacturing systems, while running risk assessments, audits, and compliance with NIST 800-53/171, FedRAMP, ISO 27001, and SOC 2 at a reusable-rocket company.
- Compensation
- $133.6K–$240.5K / yr
- Location
- Kent, United States
- Work setup
- Onsite
- Seniority
- Not specified
- Employment
- Full time
- Experience
- 5+ years
- Category
- Security
- Posted
Skills
Must have
- Bachelor's degree in Computer Science, Cybersecurity, or related field
- 5+ years of experience in the Information Security field
- Exceptional understanding of IT infrastructure (applications, networks, servers, storage, cloud)
- Knowledge of frameworks such as NIST 800-53/171, SOC 2, ISO 27001
- Strong analytical and problem-solving skills to identify and mitigate security risks
- Excellent written and verbal communication
- U.S. citizenship, lawful permanent residency, or protected individual status per ITAR export regulations
Nice to have
- Professional security certifications such as CISSP, GCED, GCIH, or equivalent practical experience
- Experience operating in regulated environments subject to NIST 800-171, NIST 800-53, FedRAMP, ISO 27001, SOC 2, or CUI handling
- Experience integrating security into the SDLC (threat modeling, secure code review, CI/CD security controls, vulnerability remediation)
- Experience in regulated environments with strict data protection or government-driven security requirements
- Prior experience working in a startup environment
Full description
At Stoke, we believe a thriving space economy will enable a vibrant, sustainable, and equitable future here on Earth. That is why we’re building Nova, our fully and rapidly reusable launch vehicle. Designed for daily flight, Nova tackles the core challenges of space transportation by reducing cost, increasing availability, and improving reliability. By radically lowering launch costs and increasing flight cadence, we’re helping create a truly scalable space industry.
Our team is mission-driven, collaborative, and empowered to take ownership of their work. If you want to work alongside some of the most dedicated and talented people on Earth, we’d love to have you join us.
Description
Reusable launch systems depend on secure, resilient, and well-architected information systems. As an Information Security Systems Engineer, you will design, implement, document and continuously improve the technical security controls that protect Stoke’s infrastructure, engineering environments, manufacturing systems, and sensitive aerospace data.
This is a hands-on security engineering role with ownership of Stoke’s evolving information security program. You will strengthen, maintain, and mature the technical controls that protect our infrastructure, engineering systems, and manufacturing environments, while driving risk management and framework alignment efforts. You will translate regulatory requirements (including NIST 800-53/171, FedRAMP, ISO 27001, and SOC frameworks) into practical, scalable controls embedded within our systems and maintain the documentation and evidence necessary to support audits and compliance activities.
We are a small, highly motivated team. You will work across IT, software engineering, manufacturing, and operations to implement scalable security guardrails that enable teams to move fast without compromising risk posture.
You must be ready to stay focused, move quickly, self-direct, and learn on the fly.
Responsibilities
- Lead and facilitate the risk assessment process, including identifying, evaluating, and treating information security risks
- Define, document, and enforce security policies, standards, and procedures in alignment with regulatory and industry compliance standards, including NIST 800-53/171, SOC1/SOC2, ISO 27001
- Design, implement, and continuously improve security controls across cloud and on-premise systems, including identity, endpoint, network, and logging environments
- Monitor and analyze security systems and alerts to identify suspicious activities and respond to potential threats
- Conduct regular security audits and vulnerability assessments to identify and mitigate potential risks
- Collaborate with cross-functional teams to integrate security controls into business processes, IT systems, and engineering development