Mission Security Engineer III

True Anomaly, Inc.; Denver (CO); Presencial; USD 120.000 - 170.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Healthcare (company-paid)

Paid time off

Lunch provided

Equity + Benefits

401K

Parental Leave

Descripción de la vacante

True Anomaly, Inc. is seeking a Mission Security Engineer III to secure national security space systems, including ground-based C2 infrastructure and space vehicle software.

The role blends deep IT and cybersecurity with RMF, STIGs, and zero trust in a fast-paced, cross-functional team. On-site in Denver, CO with strict clearance requirements and DoD/IC program exposure.

Formación

• 3-5 years of combined experience in a technical IT field, security engineering, DevSecOps, and/or software development.
• Active Top Secret clearance with SCI eligibility required.
• DoD 8140 IAT Level II certification (Security+, CySA+, or equivalent) required.
• Experience implementing or utilizing NSA Type 1 cryptographic solutions in operational systems.
• Experience with RMF processes and achieving ATOs for complex systems.
• Working knowledge of NIST SP 800-53 security controls and how they map to technical implementation.
• Hands-on experience implementing STIGs at the OS, container, platform, and application level.
• Familiarity with space system architectures including satellite operations, ground segments, and TT&C systems.
• Bachelor's degree in Computer Science, Cybersecurity, Engineering, or related field (or equivalent experience).

Responsabilidades

• Implement end-to-end security controls for ground-based C2 systems, spacecraft hardware and software platforms, spanning firmware, embedded systems, cloud-native applications, and operational technology.
• Ensure security architectures enable effective monitoring, logging, and incident response without compromising operational tempo.
• Implement security controls and zero trust architecture throughout the product development lifecycle, minimizing RMF findings through strong upfront engineering.
• Implement and validate DISA STIG requirements at the OS, container, platform, and application layers within products as they are developed.
• Integrate RMF controls into CI/CD pipelines through DevSecOps practices including Infrastructure as Code (IaC), automated security scanning, and continuous monitoring tooling.
• Identify and remediate findings from STIGs, vulnerability scans, penetration testing, and SCA activities to maintain ATO posture.
• Support all RMF Steps 1-6, with emphasis on control implementation, assessment preparation, and remediation for DoD and IC programs.
• Ensure compliance with NIST 800-53, CNSSI 1253, ICD 503, JSIG, and other applicable frameworks for National Security Systems (NSS) handling classified information up to TS/SCI.
• Support cloud Provisional Authorization (PA) and inherited control models across classified cloud environments (e.g., IL-6 CSPs).
• Contribute technically to security artifacts including SSPs, SAPs, SARs, and POA&M s.
• Serve as a credible technical voice with government ISSOs, ISSEs, and third-party assessors during ATO and reauthorization activities.

Conocimientos

Security engineering

DevSecOps

Software development

RMF processes

NIST 800-53

STIGs

Zero Trust

Cloud security

C2 systems

Educación

Bachelor's degree in Computer Science or related field

Herramientas

SIEM

Vulnerability scanners

Audit/logging systems

Descripción del empleo

Space is a warfighting domain. True Anomaly seeks those with the talent and ambition to build the technology that secures it.

OUR MISSION

True Anomaly delivers decisive capabilities for space superiority. We build autonomous spacecraft, advanced payloads, mission software, and space-based interceptors - enabling the U.S. and its Allies to secure the space environment and counter threats from the ultimate high ground.

OUR VALUES

Be the offset. We create asymmetric advantages with creativity and ingenuity.

What would it take? We challenge assumptions to deliver ambitious results.

It’s the people. Our team is our competitive advantage and we are better together.

BENEFITS & PERKS *

Best-in-class healthcare: 100% company-paid medical, dental, and vision coverage for you and your dependents, with HSA/HRA options

Generous time off: Flexible Time Off (FTO) for exempt employees, accrued PTO of up to 25 days for non-exempt employees, plus 12 paid holidays; Parental Leave; Sick Leave

Fuel for your day: Daily catered lunch and unlimited snacks for in-office employees

And more: 401(k) retirement plan, fitness reimbursement, and Dog Fridays

Equity participation: Equity is included as part of our total compensation package, giving you an opportunity to share in the company’s success.

*Do not apply to fixed term and temporary roles

YOUR MISSION

As a Mission Security Engineer III, you will be a critical technical expert securing national security space systems, classified ground-based Command and Control (C2) infrastructure, and space vehicle hardware and software.

This is a hands-on role that blends deep technical Information Technology (IT) expertise with cybersecurity and compliance acumen. We are looking for candidates with deep expertise in at least one of the following disciplines:

Cybersecurity compliance (NIST 800-53 controls implementation and validation)

DevSecOps

Software Development

Operating systems & hosting (Windows / Linux)

Cloud infrastructure deployment (AWS/Azure)

Containerization infrastructure, Kubernetes, EKS, AKS

Boundary protection

Endpoint Detection and Response / Extended Detection and Response (EDR/XDR)

Security Information and Event Management / Security Operations Center (SIEM/SOC) deployment

You will work as part of a highly capable, cross-functional team to design, deploy, measure, and document classified systems from the ground up - navigating dynamic, cross-program priorities that change daily. You will be responsible for ensuring our systems meet the most rigorous federal security standards while accelerating delivery of critical warfighting capabilities to Department of War and Intelligence Community customers.

This is an ideal role for a security-focused technologist with deep IT or cybersecurity technical skills who is eager to take novel, innovative approaches to cybersecurity and compliance. If you're energized by the challenges of securing mission-critical systems that protect lives and national interests, join our team.

Responsibilities

Implement end-to-end security controls for ground-based C2 systems, spacecraft hardware and software platforms, spanning firmware, embedded systems, cloud-native applications, and operational technology

Ensure security architectures enable effective monitoring, logging, and incident response without compromising operational tempo

Implement security controls and zero trust architecture throughout the product development lifecycle, minimizing RMF findings through strong upfront engineering

Implement and validate DISA STIG requirements at the OS, container, platform, and application layers within products as they are developed

Integrate RMF controls into CI/CD pipelines through DevSecOps practices including Infrastructure as Code (IaC), automated security scanning, and continuous monitoring tooling

Identify and remediate findings from STIGs, vulnerability scans, penetration testing, and SCA activities to maintain ATO posture

Support all RMF Steps 1-6, with emphasis on control implementation, assessment preparation, and remediation for DoD and IC programs

Ensure compliance with NIST 800-53, CNSSI 1253, ICD 503, JSIG, and other applicable frameworks for National Security Systems (NSS) handling classified information up to TS/SCI

Support cloud Provisional Authorization (PA) and inherited control models across classified cloud environments (e.g., Impact Level (IL)-6 Cloud Service Providers (CSPs))

Contribute technically to security artifacts including SSPs, SAPs, SARs, and POA&M s

Serve as a credible technical voice with government ISSOs, ISSEs, and third-party assessors during ATO and reauthorization activities

Required Qualifications

3-5 years of combined experience in a technical IT field, security engineering, DevSecOps, and/or software development

Active Top Secret clearance with SCI eligibility required

DoD 8140 IAT Level II certification (Security+, CySA+, or equivalent) required

Experience implementing or utilizing NSA Type 1 cryptographic solutions in operational systems

Experience with RMF processes and achieving ATOs for complex systems

Working knowledge of NIST SP 800-53 security controls and how they map to technical implementation

Hands-on experience implementing STIGs at the OS, container, platform, and application level

Familiarity with space system architectures including satellite operations, ground segments, and TT&C systems

Bachelor's degree in Computer Science, Cybersecurity, Engineering, or related field (or equivalent experience)

Preferred Qualifications

Active TS/SCI clearance with polygraph

Direct experience securing C2 systems, space systems, or other DoD mission systems

Experience supporting DoD or IC customers through ATO, re-ATO, or continuous authorization

Direct experience within IL-5 or IL-6 impact level cloud environments

Knowledge of cloud security control inheritance and shared responsibility models within DoD IL-5 or IL-6 environments

Familiarity with Cross Domain Solutions (CDS), data guards, or other information flow control technologies

Experience with FedRAMP High, CMMC, or DoD IL-5/IL-6 authorizations

Experience integrating security tooling (e.g., SIEMs, vulnerability scanners, audit/logging systems) into development workflows

Understanding of zero trust architectures and modern identity solutions applied to classified environments

Work Environment

This role will be onsite in Denver, CO (preferred) or Long Beach, CA #LI-Onsite

Fast-paced, mission-critical environment supporting national security space operations

Requires coordination across distributed teams including spacecraft engineers, ground operations, and government partners

May require participation in on-call rotation for security incident response and mission-critical system support

High degree of autonomy and ownership as a trusted, cleared team member

Occasional travel to government sites, launch facilities, or partner locations may be required

What We Offer

Competitive salary commensurate with experience and clearance level

Opportunity to drive security posture for cutting-edge space systems with national security impact

Professional development support including conferences, training, and security certifications

Collaborative culture working alongside spacecraft engineers, mission operators, and experienced security professionals

Equity + Benefits including Health, Dental, Vision, HRA/HSA options, PTO and paid holidays, 401K, Parental Leave

Compensation

Colorado Base Salary: $120,000-$170,000

California Base Salary: $125,000-$180,000 for Long Beach

Equity + Benefits including Health, Dental, Vision, HRA/HSA options, PTO and paid holidays, 401K, Parental Leave

Your actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, location, and experience.

To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR), you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State.

To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR) you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State.

True Anomaly is committed to equal employment opportunity on any basis protected by applicable state and federal laws. If you have a disability or additional need that requires accommodation, please do not hesitate to let us know.