Cybersecurity Engineer

Responsibilities

Security Architecture & Design

• Design and maintain enterprise-wide cybersecurity architecture aligned with business and technology strategies.
• Develop secure architectures for cloud, on-premises, hybrid, and multi-cloud environments.
• Create and maintain security standards, reference architectures, and technical design
• documents.
• Perform threat modeling and security architecture reviews for new systems, applications, and infrastructure.
• Evaluate emerging technologies and recommend security controls and solutions.

Security Engineering & Implementation

• Design, implement, and optimize security controls across networks, systems, endpoints, applications, and cloud platforms.
• Lead deployment and integration of security technologies including SIEM, IDS/IPS, DLP, EDR/XDR, IAM, and vulnerability management platforms.
• Develop and automate security processes using scripting and infrastructure-as-code methodologies.
• Collaborate with infrastructure, application development, and cloud engineering teams to embed security into technology solutions.

Risk Management & Compliance

• Conduct security risk assessments, vulnerability assessments, and security audits.
• Identify security gaps and develop remediation strategies.
• Ensure compliance with applicable regulatory and industry frameworks, including:
• NIST 800-53
• NIST 800-171/172
• ISO 27001
• CIS Controls
• SOC 2
• Support governance, risk, and compliance (GRC) initiatives.

Incident Response & Security Operations

• Provide architectural guidance during cybersecurity incidents and investigations.
• Support incident response, threat hunting, and forensic analysis activities.
• Review security events and identify opportunities to strengthen defensive capabilities.
• Assist in developing cyber resilience and business continuity strategies.

Leadership & Collaboration

• Serve as a cybersecurity subject matter expert for technical and business stakeholders.
• Mentor junior cybersecurity engineers, analysts, and administrators.
• Present security recommendations, risk assessments, and strategic initiatives to leadership.
• Partner with IT, engineering, operations, legal, and compliance teams to support enterprise security objectives.

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Systems, Computer Engineering, or a related technical field.
• 7–10+ years of experience in cybersecurity, information security, network security, cloud security, or related IT disciplines.
• 3–5+ years of experience designing security architectures or leading cybersecurity engineering initiatives.
• Experience implementing enterprise security controls and security frameworks.
• Experience securing cloud platforms such as AWS, Azure, or Google Cloud Platform.
• Security Architecture
• Enterprise Security Architecture
• Zero Trust Architecture
• Secure-by-Design Principles
• Threat Modeling
• Security Control Design
• Security Roadmap Development
• Network & Infrastructure Security
• Firewalls
• Strategic thinking and problem-solving
• Strong analytical and risk assessment capabilities
• Excellent written and verbal communication skills
• Ability to communicate complex technical concepts to non-technical audiences
• Decision-making under pressure
• Strong documentation and presentation skills

Preferred

• CISSP (Certified Information Systems Security Professional)
• CISM (Certified Information Security Manager)

CCSP (Certified Cloud Security Professional)

• Experience with large-scale enterprise environments.
• Experience in regulated industries (financial services, healthcare, government, aerospace, defense, etc.).
• Experience with cloud-native security and DevSecOps practices.
• Knowledge of MITRE ATT&CK framework and threat intelligence methodologies.
• Experience supporting security audits and compliance assessments.
• Experience designing resilient and highly available security architectures.

About the Role

The Cybersecurity Engineer is responsible for designing, implementing, and maintaining secure enterprise architectures, systems, applications, networks, and cloud environments. This role provides technical leadership in cybersecurity strategy, risk management, security engineering, and compliance initiatives while ensuring Apex's information assets are protected against evolving cyber threats.

The ideal candidate combines deep technical expertise with strong business acumen to develop security solutions that align with organizational objectives, regulatory requirements, and industry best practices.

Preferred

• Master's degree in Cybersecurity, Information Security, Computer Science, or related discipline.
• Professional Certifications (Preferred)

One or more of the following

• SABSA Security Architecture Certification
• AWS Certified Security – Specialty

Microsoft Azure Security Engineer Associate

GIAC Security Certifications (GIAC, GSEC, GDSA, etc.)

IDS/IPS

• VPN Technologies
• Network Segmentation
• DNS Security
• TCP/IP Protocols
• Secure Network Design
• Cloud Security
• AWS Security Services
• Microsoft Azure Security Services
• Google Cloud Security
• Container Security
• Kubernetes Security
• Infrastructure as Code (Terraform, CloudFormation)
• Identity & Access Management
• Active Directory
• Entra ID (Azure AD)
• Single Sign-On (SSO)
• Multi-Factor Authentication (MFA)
• OAuth

SAML

• Privileged Access Management (PAM)
• Security Operations
• SIEM Platforms (Elastic,Splunk)
• Endpoint Detection & Response (EDR/XDR)
• Vulnerability Management
• Security Monitoring
• Threat Intelligence
• Incident Response
• Application Security
• Secure SDLC
• DevSecOps
• Application Security Testing (SAST/DAST)
• API Security
• OWASP Top 10
• Secure Coding Practices
• Programming & Automation
• Python
• PowerShell
• Bash/Shell Scripting
• REST APIs
• Security Automation

Required Soft Skills

• Leadership and mentoring skills
• Project and stakeholder management

Preferred Qualifications

#LI-JC1

Why Join Apex?

Apex believes in creating a work environment that you look forward to embracing every day. Our employees love working at Apex, and we want you to love it too. We're a fast-growing startup that has raised more than $500M in funding, and we invest heavily in our people from day one.

Shared upside

Receive equity in Apex, letting you benefit from the work you create

Best-in-class healthcare

100% company-paid medical, dental, and vision for you and your dependents, plus $100k life insurance at no cost

Comprehensive PTO package

Starting at 15 days vacation, growing to 20+ days annually, plus 10 paid holidays

Competitive 401(k) plan

Generous matching - 100% match on first 3%, 50% on next 2%

8 weeks paid parental leave

Plus childcare reimbursement up to $350/day for work-related travel

Daily catered lunch and unlimited snacks

To keep you fueled throughout the day

Vibrant community

Monthly office socials, pickleball tournaments, run club, and gatherings for you and your family

Your dream desk setup

All the tools you need to be your most productive self

World-class Playa Vista office

With the benefit of in-person collaboration with amazing coworkers and flexibility to integrate work and life

Real impact opportunity

Work alongside experts from aerospace, new space, and other cutting-edge industries to make a lasting difference

Additional Information

Compensation ranges are set by role, level, location, and alignment with market data. A candidate's specific level and base pay are determined case by case and may vary with job-related skills, education, experience, technical capabilities, and internal equity. Beyond base salary, full-time hires are also eligible for long-term incentives in the form of stock options, along with medical, dental, and vision coverage and a 401(k) retirement plan.

ITAR Requirements

Apex's work is governed by U.S. export control laws, including the International Traffic in Arms Regulations (ITAR) and the Export Administration Regulations (EAR). To be eligible for this role, applicants must either (1) qualify as a U.S. Person, meaning a U.S. citizen or national, a lawful permanent resident (green card holder), a refugee admitted under 8 U.S.C. § 1157, or an individual granted asylum under 8 U.S.C. § 1158, or (2) be able to obtain the required export authorizations from the U.S. Department of State, the U.S. Department of Commerce, or another applicable U.S. government agency. You can learn more about ITAR here

Equal Opportunity Employer

Apex Technology, Inc. is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. Candidates and employees are always evaluated based on merit, qualifications, and performance. We will never discriminate on the basis of race, color, gender, national origin, ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability, or any other legally protected status.