<div>At Stoke, we believe that a thriving space economy leads to a vibrant, sustainable, and equitable future here on Earth. That is why we are building our fully and rapidly reusable vehicle, Nova. It is designed to fly daily and solve the core challenges of space transportation – it reduces cost, increases availability, and enhances reliability. By radically lowering the cost and increasing the cadence of launch, we’re able to create a truly scalable space industry.Our team is mission-driven, collaborative, and empowered with ownership of their work. If you want to work with some of the most dedicated and talented people on Earth, come join us.</div>DescriptionReusable launch systems are the key to seamlessly connecting Earth and space. Security and compliance with applicable frameworks are foundational to these efforts. As an Information Systems Security Engineer in Stoke Space’s Information Technology department, you’ll be the person ensuring that our information security posture meets our rapidly growing needs and achieves our ISO 27001:2022 compliance obligations while facilitating a successful startup culture as we race towards our first launch of Nova.We are a small and motivated team, and you will work across the entire Stoke organization and across product teams to define our ISMS scope, perform risk assessments, and implement security controls as necessary. Additionally, you will align our ISO 27001:2022 controls with our other GRC frameworks including NIST and FedRAMP. You must be ready to stay focused, move fast, self-direct, and learn on the fly. Responsibilities<ul><li>Lead the development, implementation, and continuous improvement of the ISO/IEC 27001:2022-compliant ISMS</li><li>Own the risk assessment process, including identifying, evaluating, and treating information security risks</li><li>Define, document, and enforce security policies, standards, and procedures in alignment with ISO 27001:2022 Annex A controls</li><li>Monitor and analyze security systems and alerts to identify suspicious activities and respond to potential threats</li><li>Conduct regular security audits and vulnerability assessments to identify and mitigate potential risks</li><li>Align the organization’s ISO 27001 implementation with complementary security frameworks such as NIST 800-53, NIST 800-171, FedRAMP and SOC 2, where applicable</li><li>Collaborate with cross-functional teams to integrate security controls into business processes, IT systems, and engineering development</li><li>Stay current with changes to ISO standards, emerging threats, and evolving compliance obligations</li><li>Assist with hands-on system administration tasks, particularly those related to security configurations</li><li>Perform additional duties as assigned to support organizational goals and objectives</li></ul>Qualifications<ul><li>Exceptional understanding of IT infrastructure, including applications, networks, servers, storage, and cloud technologies</li><li>Strong analytical and problem-solving skills to identify, address, and mitigate security risks and issues</li><li>Bachelor’s degree in Computer Science, Cybersecurity or related field</li><li>5+ years of experience in Information Security field </li><li>Deep understanding of ISO/IEC 27001:2022, including Annex A controls and risk-based implementation</li><li>Excellent written and verbal communication </li></ul>Preferred Qualifications<ul><li>Relevant certifications such as ISO/IEC 2700:2002 Lead Implementer, CISSP, or CISA</li><li>Knowledge of other frameworks (e.g., NIST 800-53/171, SOC 2) is a plus</li><li>Experience in aerospace and/or manufacturing organizations</li><li>Prior experience working in a startup environment, demonstrating adaptability, resourcefulness, and a hands-on approach to security management</li></ul>Benefits<ul><li>Equity – We know that our employees are the reason we succeed. To give everyone a stake in our future, we are pleased to offer equity in the form of stock options to all regular, full-time employees. </li><li>Comprehensive benefits program including subsidized medical, dental, and vision insurance </li><li>Company-paid life and disability insurance </li><li>401(k) plan with employer match </li><li>4 weeks’ Paid Time Off  </li><li>Holidays – 10 days (including an end-of-year closure) </li><li>Paid Family/Parental Leave  </li><li>On-site gym or monthly wellness stipend (depending on location) </li><li>Dog friendly offices! </li></ul>CompensationTarget Levels:<ul><li>Level 3 range: $127,200 - $190,800 </li><li>Level 4 range: $152,600 - $229,000 </li></ul>Our job posts are intentionally written to attract a wide variety of experience levels, and we make decisions about the right fit on a per-candidate basis. Your actual level and base salary will be decided based on your specific experience and skill level.To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR), you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State.<div>Equal Opportunity The Company is an Equal Opportunity Employer, including with respect to disability and veteran status.  It is committed to compliance with all equal opportunity laws, including the Immigration and Nationality Act (INA) and Title VII.   It does not discriminate on the basis of nationality, race, citizenship, immigration status, or any other protected class when it comes to employment practices, including hiring. Employment at the Company is contingent upon satisfactory completion of reference and background checks, and on your ability to prove your identity and authorization to work in the U.S. for the Company.  Employees must comply with the United States Citizenship and Immigration Services employment verification requirements, and, therefore, they must complete an Employment Eligibility Verification Form I-9 at the start of employment and re-verify authorization to work periodically.Separate from this I-9 process, this position entails access to certain technology and technical data that is restricted under U.S. export control laws and regulations.  Employment or continued employment may be conditioned on your legal authorization to work with or have access to export control materials as necessary to perform your job.  </div>

We&rsquo;ve reached a critical point in our history. Stoke is asking the tough question: How do we grow as a civilization without destroying our home? We believe a perspective from space will give us the information we need to achieve both. Space technology and satellite data help us understand the changing world around us. We are opening up access to and from orbit with our rockets designed to fly daily.

Information Systems Security Engineer

<div>At Stoke, we believe that a thriving space economy leads to a vibrant, sustainable, and equitable future here on Earth. That is why we are building our fully and rapidly reusable vehicle, Nova. It is designed to fly daily and solve the core challenges of space transportation – it reduces cost, increases availability, and enhances reliability. By radically lowering the cost and increasing the cadence of launch, we’re able to create a truly scalable space industry.Our team is mission-driven, collaborative, and empowered with ownership of their work. If you want to work with some of the most dedicated and talented people on Earth, come join us.</div>DescriptionReusable launch systems are the key to seamlessly connecting Earth and space. Security and compliance with applicable frameworks are foundational to these efforts.&nbsp;As&nbsp;an Information Systems Security Engineer&nbsp;in Stoke Space’s Information Technology department, you’ll be the person ensuring that our information security posture meets our rapidly growing needs and achieves our ISO 27001:2022 compliance obligations while facilitating a successful startup culture as we race towards our first launch of Nova.We are a small and motivated team, and you will work across the entire Stoke organization and across product teams to define our ISMS scope, perform risk assessments, and implement security controls as necessary. Additionally, you will align our ISO 27001:2022 controls with our other GRC frameworks including NIST and FedRAMP.&nbsp;You must be ready to stay focused, move fast, self-direct, and learn on the fly.&nbsp;Responsibilities<ul><li>Lead the development, implementation, and continuous improvement of the ISO/IEC 27001:2022-compliant ISMS</li><li>Own the risk assessment process, including identifying, evaluating, and treating information security risks</li><li>Define, document, and enforce security policies, standards, and procedures in alignment with ISO 27001:2022 Annex A controls</li><li>Monitor and analyze security systems and alerts to identify suspicious activities and respond to potential threats</li><li>Conduct regular security audits and vulnerability assessments to identify and mitigate potential risks</li><li>Align the organization’s ISO 27001 implementation with complementary security frameworks such as NIST 800-53, NIST 800-171, FedRAMP and SOC 2, where applicable</li><li>Collaborate with cross-functional teams to integrate security controls into business processes, IT systems, and engineering development</li><li>Stay current with changes to ISO standards, emerging threats, and evolving compliance obligations</li><li>Assist with hands-on system administration tasks, particularly those related to security configurations</li><li>Perform additional duties as assigned to support organizational goals and objectives</li></ul>Qualifications<ul><li>Exceptional understanding of IT infrastructure, including applications, networks, servers, storage, and cloud technologies</li><li>Strong analytical and problem-solving skills to identify, address, and mitigate security risks and issues</li><li>Bachelor’s degree in Computer Science, Cybersecurity or related field</li><li>5+ years of experience in Information Security field&nbsp;</li><li>Deep understanding of ISO/IEC 27001:2022, including Annex A controls and risk-based implementation</li><li>Excellent written and verbal communication&nbsp;</li></ul>Preferred Qualifications<ul><li>Relevant certifications such as ISO/IEC 2700:2002 Lead Implementer, CISSP, or CISA</li><li>Knowledge of other frameworks (e.g., NIST 800-53/171, SOC 2) is a plus</li><li>Experience in aerospace and/or manufacturing organizations</li><li>Prior experience working in a startup environment, demonstrating adaptability, resourcefulness, and a hands-on approach to security management</li></ul>Benefits<ul><li>Equity – We know that our employees are the reason we succeed. To give everyone a stake in our future, we are pleased to offer equity in the form of stock options to all regular, full-time employees.&nbsp;</li><li>Comprehensive benefits program including subsidized medical, dental, and vision insurance&nbsp;</li><li>Company-paid life and disability insurance&nbsp;</li><li>401(k) plan with employer match&nbsp;</li><li>4 weeks’ Paid Time Off &nbsp;</li><li>Holidays – 10 days (including an end-of-year closure)&nbsp;</li><li>Paid Family/Parental Leave &nbsp;</li><li>On-site gym or monthly wellness stipend (depending on location)&nbsp;</li><li>Dog friendly offices!&nbsp;</li></ul>CompensationTarget Levels:<ul><li>Level 3 range: $127,200 - $190,800&nbsp;</li><li>Level 4 range: $152,600 - $229,000&nbsp;</li></ul>Our job posts are intentionally written to attract a wide variety of experience levels, and we make decisions about the right fit on a per-candidate basis.&nbsp;Your actual level and base salary will be decided based on your specific experience and skill level.To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR), you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State.<div>Equal Opportunity&nbsp;The Company is an Equal Opportunity Employer, including with respect to disability and veteran status.&nbsp; It is committed to compliance with all equal opportunity laws, including the Immigration and Nationality Act (INA) and Title VII.&nbsp;&nbsp; It does not discriminate on the basis of nationality, race, citizenship, immigration status, or any other protected class when it comes to employment practices, including hiring.&nbsp;Employment at the Company is contingent upon satisfactory completion of reference and background checks, and on your ability to prove your identity and authorization to work in the U.S. for the Company.&nbsp; Employees must comply with the United States Citizenship and Immigration Services employment verification requirements, and, therefore, they must complete an Employment Eligibility Verification Form I-9 at the start of employment and re-verify authorization to work periodically.Separate from this I-9 process, this position entails access to certain technology and technical data that is restricted under U.S. export control laws and regulations.&nbsp; Employment or continued employment may be conditioned on your legal authorization to work with or have access to export control materials as necessary to perform your job.&nbsp;&nbsp;</div>

Information Systems Security Engineer

About the Job

About the Company

Stoke Space

Similar Jobs

Information Security Engineer

Information Security Engineer

Cyber Security Engineer III (ICS/OT)

Cyber Security Engineer III (ICS/OT)

IT Cyber Security Specialist

IT Cyber Security Specialist

Senior Security Engineer

Senior Security Engineer

Senior Information Systems Security Manager (ISSM)

Senior Information Systems Security Manager (ISSM)

Vice President Information Security (f/m/d)

Vice President Information Security (f/m/d)

Senior IT Data Security & OT Risk Engineer

Senior IT Data Security & OT Risk Engineer

IT Support Specialist

IT Support Specialist

Cybersecurity Engineer

Cybersecurity Engineer

Senior Cybersecurity Engineer

Senior Cybersecurity Engineer