Job description

Spacecraft represent the most pressing unmet need across the entire aerospace industry. As more launch vehicles come online and the cost to orbit decreases, more companies launching payloads to space continue to emerge. For the first time in history, this influx of payload companies combined with reduced launch costs has resulted in a massive increase in need for commercial spacecraft platforms, known as satellite buses. These buses hold the payloads of our customers and are flown on launch vehicles. Apex manufactures these satellite buses at scale using a combination of software, vertical integration, and hardware that is designed for manufacturing. Our spacecraft enable the future of society: ranging from earth observation to communications and more. We’d love for you to join us on our mission of providing humankind access to the galaxy beyond our planet. ABOUT THE ROLE The Director of Cybersecurity is a senior leadership role responsible for Apex's enterprise security strategy, operations, and compliance. Reporting to the VP of IT & Security and based on-site at our Playa Vista office, this role leads the Cybersecurity (SOC) Lead and security team to safeguard the organization's information assets against evolving cyber threats. The Director of Cybersecurity owns security strategy, the Security Operations Center (SOC), threat and vulnerability management, incident response, and governance, risk, and compliance for a fast-growing space and satellite manufacturing company operating in regulated and often controlled environments. The role requires deep technical expertise, strategic oversight, and strong leadership, and partners closely with IT, compliance, engineering, and executive leadership. Key Responsibilities Security Strategy & Governance • Security roadmap: Define and execute the multi-year cybersecurity strategy, aligning security investments and controls with Apex's business and mission objectives and emerging threats. • Policy and architecture: Establish and maintain security policies, standards, reference architectures, and playbooks across infrastructure, cloud, endpoints, and applications. • Budget ownership: Own the security budget, technology evaluations, and resource allocation; optimize spend while strengthening the overall defensive posture. Security Operations & Incident Response • SOC leadership: Direct the Cybersecurity (SOC) Lead and team in 24/7 monitoring, detection, triage, and response; ensure appropriate staffing, coverage, and surge support. • Incident command: Serve as the senior escalation point for complex incidents; own incident response readiness, containment and eradication, and post-incident analysis and remediation. • Threat management: Oversee proactive threat hunting, malware analysis, and threat intelligence integration to stay ahead of emerging cyber risks. Tools, Detection & Continuous Improvement • Security tooling: Own the selection, tuning, and optimization of SIEM, EDR/XDR, IDS/IPS, CASB/SASE, SOAR, and vulnerability management systems to maximize detection and reduce false positives. • Automation and metrics: Drive automation, develop and track KPIs and dashboards, and deliver executive reporting on threats, incidents, and defensive posture. Governance, Risk & Compliance • Accreditations: Lead efforts to achieve and maintain CMMC, ISO 27001, NIST 800-171, and other accreditations required to support Apex's government and commercial programs. • Risk and audits: Own risk assessments, audits, tabletop exercises, data protection, and continuous monitoring; ensure timely remediation of findings. Team Leadership & Stakeholder Engagement • Leadership: Build, mentor, and develop a high-performing security team; set goals, manage performance, and lead hiring, training, and professional development. • IT partnership: Partner with the IT function to embed security into infrastructure, projects, and daily operations, and support IT tickets and projects when needed. • Executive reporting: Report on security posture, incidents, KPIs, and risk to the VP of IT & Security and executive leadership; translate technical risk into business terms. Required Qualifications • Experience: 8+ years in cybersecurity operations, including 4+ years in a SOC leadership or security management role. • Technical skills: Proficiency in security tooling (SIEM, EDR/XDR, IDS/IPS, CASB/SASE, NESSUS, Burp Suite, firewalls) and scripting (e.g., Python, PowerShell), with a strong understanding of networking protocols and operating systems (Windows/macOS/Linux). • Compliance expertise: Experience leading CMMC, ISO 27001, and/or NIST 800-53 or 800-171 programs, including audits and continuous monitoring. • Leadership skills: Strong analytical, problem-solving, and communication skills, with a proven ability to lead teams in high-pressure environments. • Eligibility: Must be a U.S. person (U.S. citizen or permanent resident) due to the nature of Apex's programs. Nice-to-Have • Education: Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field (Master's preferred). • Certifications: One or more of CISSP, CISM, GIAC GCIH, or CompTIA Security+ strongly preferred. • Experience in aerospace, defense, satellite, or advanced manufacturing environments. • Experience operating in classified or controlled environments; an active or prior U.S. security clearance (e.g., Secret or TS/SCI) is a strong plus. • Familiarity with AWS GovCloud and FedRAMP-aligned cloud operations. • Hands-on experience with Elastic SIEM and building SOC automation and playbooks. #LI-JC1 WHY JOIN APEX? Apex believes in creating a work environment that you look forward to embracing every day. Our employees love working at Apex, and we want you to love it too. We're a fast-growing startup that has raised more than $500M in funding, and we invest heavily in our people from day one. WHAT WE OFFER FOR FULL-TIME EMPLOYEES: - Shared upside: Receive equity in Apex, letting you benefit from the work you create - Best-in-class healthcare: 100% company-paid medical, dental, and vision for you and your dependents, plus $100k life insurance at no cost - Comprehensive PTO package: Starting at 15 days vacation, growing to 20+ days annually, plus 10 paid holidays - Competitive 401(k) plan: Generous matching - 100% match on first 3%, 50% on next 2% - 8 weeks paid parental leave: Plus childcare reimbursement up to $350/day for work-related travel - Daily catered lunch and unlimited snacks: To keep you fueled throughout the day - Vibrant community: Monthly office socials, pickleball tournaments, run club, and gatherings for you and your family - Your dream desk setup: All the tools you need to be your most productive self - World-class Playa Vista office: With the benefit of in-person collaboration with amazing coworkers and flexibility to integrate work and life - Real impact opportunity: Work alongside experts from aerospace, new space, and other cutting-edge industries to make a lasting difference ADDITIONAL INFORMATION: Compensation ranges are set by role, level, location, and alignment with market data. A candidate's specific level and base pay are determined case by case and may vary with job-related skills, education, experience, technical capabilities, and internal equity. Beyond base salary, full-time hires are also eligible for long-term incentives in the form of stock options, along with medical, dental, and vision coverage and a 401(k) retirement plan. ITAR REQUIREMENTS Apex's work is governed by U.S. export control laws, including the International Traffic in Arms Regulations (ITAR) and the Export Administration Regulations (EAR). To be eligible for this role, applicants must either (1) qualify as a U.S. Person, meaning a U.S. citizen or national, a lawful permanent resident (green card holder), a refugee admitted under 8 U.S.C. § 1157, or an individual granted asylum under 8 U.S.C. § 1158, or (2) be able to obtain the required export authorizations from the U.S. Department of State, the U.S. Department of Commerce, or another applicable U.S. government agency. You can learn more about ITAR here pmddtc.state.gov. EQUAL OPPORTUNITY EMPLOYER Apex Technology, Inc. is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. Candidates and employees are always evaluated based on merit, qualifications, and performance. We will never discriminate on the basis of race, color, gender, national origin, ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability, or any other legally protected status.

Requirements

Must-haves

Spacecraft represent the most pressing unmet need across the entire aerospace industry. As more launch vehicles come online and the cost to orbit decreases, more companies launching payloads to space continue to emerge.
We’d love for you to join us on our mission of providing humankind access to the galaxy beyond our planet.
Security Strategy & Governance
Security roadmap: Define and execute the multi-year cybersecurity strategy, aligning security investments and controls with Apex's business and mission objectives and emerging threats.
Policy and architecture: Establish and maintain security policies, standards, reference architectures, and playbooks across infrastructure, cloud, endpoints, and applications.
Budget ownership: Own the security budget, technology evaluations, and resource allocation; optimize spend while strengthening the overall defensive posture.
Security Operations & Incident Response
SOC leadership: Direct the Cybersecurity (SOC) Lead and team in 24/7 monitoring, detection, triage, and response; ensure appropriate staffing, coverage, and surge support.
Incident command: Serve as the senior escalation point for complex incidents; own incident response readiness, containment and eradication, and post-incident analysis and remediation.
Threat management: Oversee proactive threat hunting, malware analysis, and threat intelligence integration to stay ahead of emerging cyber risks.
Tools, Detection & Continuous Improvement
Security tooling: Own the selection, tuning, and optimization of SIEM, EDR/XDR, IDS/IPS, CASB/SASE, SOAR, and vulnerability management systems to maximize detection and reduce false positives.
Automation and metrics: Drive automation, develop and track KPIs and dashboards, and deliver executive reporting on threats, incidents, and defensive posture.
Governance, Risk & Compliance
Accreditations: Lead efforts to achieve and maintain CMMC, ISO 27001, NIST 800-171, and other accreditations required to support Apex's government and commercial programs.
Risk and audits: Own risk assessments, audits, tabletop exercises, data protection, and continuous monitoring; ensure timely remediation of findings.
Team Leadership & Stakeholder Engagement
Leadership: Build, mentor, and develop a high-performing security team; set goals, manage performance, and lead hiring, training, and professional development.

Nice-to-haves

Education: Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field (Master's preferred).
Certifications: One or more of CISSP, CISM, GIAC GCIH, or CompTIA Security+ strongly preferred.
Experience in aerospace, defense, satellite, or advanced manufacturing environments.
Experience operating in classified or controlled environments; an active or prior U.S. security clearance (e.g., Secret or TS/SCI) is a strong plus.
Familiarity with AWS GovCloud and FedRAMP-aligned cloud operations.
Hands-on experience with Elastic SIEM and building SOC automation and playbooks.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

pythonaws

Platform: ashby
Effort: quick

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Pto

Parental Leave

Professional Development