Mission Security Engineer III

Archer; Denver (CO); On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

Best-in-class healthcare (100% company

Flexible Time Off & 25 days PTO

Sick Leave & 12 holidays

Lunch provided & snacks

401(k) retirement plan

Equity participation

Fitness reimbursement

Dog Fridays

Job summary

True Anomaly seeks a Mission Security Engineer III to safeguard national security space systems, C2 infrastructure, and spacecraft hardware/software. You will implement end-to-end security controls, zero trust across the lifecycle, and coordinate with government assessors to maintain ATO posture.

The role requires TS/SCI with polygraph eligibility, RMF/ STIGs expertise, and hands-on DevSecOps experience in complex DoD/IC programs. Denver onsite preferred.

Qualifications

• 3–5 years of combined experience in a technical IT field, security engineering, DevSecOps, and/or software development.
• Active Top Secret clearance with SCI eligibility required.
• DoD 8140 IAT Level II certification (Security+, CySA+, or equivalent) required.
• Experience implementing or utilizing NSA Type 1 cryptographic solutions in operational systems.
• Experience with RMF processes and achieving ATOs for complex systems.
• Working knowledge of NIST SP 800-53 security controls and how they map to technical implementation.
• Hands-on experience implementing STIGs at the OS, container, platform, and application level.
• Familiarity with space system architectures including satellite operations, ground segments, and TT&C systems.
• Bachelor's degree in Computer Science, Cybersecurity, Engineering, or related field (or equivalent experience)

Responsibilities

• Implement end-to-end security controls for ground-based C2 systems, spacecraft hardware and software platforms, spanning firmware, embedded systems, cloud-native applications, and operational technology.
• Ensure security architectures enable effective monitoring, logging, and incident response without compromising operational tempo.
• Implement security controls and zero trust architecture throughout the product development lifecycle, minimizing RMF findings through strong upfront engineering.
• Implement and validate DISA STIG requirements at the OS, container, platform, and application layers within products as they are developed.
• Integrate RMF controls into CI/CD pipelines through DevSecOps practices including Infrastructure as Code (IaC), automated security scanning, and continuous monitoring tooling.
• Identify and remediate findings from STIGs, vulnerability scans, penetration testing, and SCA activities to maintain ATO posture.
• Support all RMF Steps 1-6, with emphasis on control implementation, assessment preparation, and remediation for DoD and IC programs.
• Ensure compliance with NIST 800-53, CNSSI 1253, ICD 503, JSIG, and other applicable frameworks for National Security Systems (NSS) handling classified information up to TS/SCI.
• Support cloud Provisional Authorization (PA) and inherited control models across classified cloud environments (e.g., Impact Level (IL)-6 Cloud Service Providers (CSPs)).
• Contribute technically to security artifacts including SSPs, SAPs, SARs, and POA&Ms
• Serve as a credible technical voice with government ISSOs, ISSEs, and third-party assessors during ATO and reauthorization activities

Skills

Security

RMF

NIST 800-53

STIGs

DevSecOps

Top Secret clearance

Education

Bachelor's degree in Computer Science, Cybersecurity, Engineering

Job description

Archer is collaborating with True Anomaly to connect them with exceptional professionals for this role. Space is a warfighting domain. True Anomaly seeks those with the talent and ambition to build the technology that secures it.

OUR MISSION

True Anomaly delivers decisive capabilities for space superiority. We build autonomous spacecraft, advanced payloads, mission software, and space-based interceptors - enabling the U.S. and its Allies to secure the space environment and counter threats from the ultimate high ground.

OUR VALUES

• Be the offset. We create asymmetric advantages with creativity and ingenuity.
• What would it take? We challenge assumptions to deliver ambitious results.
• It’s the people. Our team is our competitive advantage and we are better together.

BENEFITS & PERKS*

• Best-in-class healthcare: 100% company-paid medical, dental, and vision coverage for you and your dependents, with HSA/HRA options
• Generous time off: Flexible Time Off (FTO) for exempt employees, accrued PTO of up to 25 days for non-exempt employees, plus 12 paid holidays; Parental Leave; Sick Leave
• Fuel for your day: Daily catered lunch and unlimited snacks for in-office employees
• And more: 401(k) retirement plan, fitness reimbursement, and Dog Fridays
• Equity participation: Equity is included as part of our total compensation package, giving you an opportunity to share in the company’s success.

YOUR MISSION

As a Mission Security Engineer III, you will be a critical technical expert securing national security space systems, classified ground-based Command and Control (C2) infrastructure, and space vehicle hardware and software.

Role

This is a hands-on role that blends deep technical Information Technology (IT) expertise with cybersecurity and compliance acumen. We are looking for candidates with deep expertise in at least one of the following disciplines: Cybersecurity compliance (NIST 800-53 controls implementation and validation), DevSecOps, Software Development, Operating systems & hosting (Windows / Linux), Cloud infrastructure deployment (AWS/Azure), Containerization infrastructure, Kubernetes, EKS, AKS, Boundary protection, Endpoint Detection and Response / Extended Detection and Response (EDR/XDR), Security Information and Event Management / Security Operations Center (SIEM/SOC) deployment.

Responsibilities

• Implement end-to-end security controls for ground-based C2 systems, spacecraft hardware and software platforms, spanning firmware, embedded systems, cloud-native applications, and operational technology
• Ensure security architectures enable effective monitoring, logging, and incident response without compromising operational tempo
• Implement security controls and zero trust architecture throughout the product development lifecycle, minimizing RMF findings through strong upfront engineering
• Implement and validate DISA STIG requirements at the OS, container, platform, and application layers within products as they are developed
• Integrate RMF controls into CI/CD pipelines through DevSecOps practices including Infrastructure as Code (IaC), automated security scanning, and continuous monitoring tooling
• Identify and remediate findings from STIGs, vulnerability scans, penetration testing, and SCA activities to maintain ATO posture
• Support all RMF Steps 1-6, with emphasis on control implementation, assessment preparation, and remediation for DoD and IC programs
• Ensure compliance with NIST 800-53, CNSSI 1253, ICD 503, JSIG, and other applicable frameworks for National Security Systems (NSS) handling classified information up to TS/SCI
• Support cloud Provisional Authorization (PA) and inherited control models across classified cloud environments (e.g., Impact Level (IL)-6 Cloud Service Providers (CSPs))
• Contribute technically to security artifacts including SSPs, SAPs, SARs, and POA&Ms
• Serve as a credible technical voice with government ISSOs, ISSEs, and third-party assessors during ATO and reauthorization activities

Required Qualifications

• 3–5 years of combined experience in a technical IT field, security engineering, DevSecOps, and/or software development
• Active Top Secret clearance with SCI eligibility required
• DoD 8140 IAT Level II certification (Security+, CySA+, or equivalent) required
• Experience implementing or utilizing NSA Type 1 cryptographic solutions in operational systems
• Experience with RMF processes and achieving ATOs for complex systems
• Working knowledge of NIST SP 800-53 security controls and how they map to technical implementation
• Hands-on experience implementing STIGs at the OS, container, platform, and application level
• Familiarity with space system architectures including satellite operations, ground segments, and TT&C systems
• Bachelor's degree in Computer Science, Cybersecurity, Engineering, or related field (or equivalent experience)

Preferred Qualifications

• Active TS/SCI clearance with polygraph
• Direct experience securing C2 systems, space systems, or other DoD mission systems
• Experience supporting DoD or IC customers through ATO, re-ATO, or continuous authorization
• Direct experience within IL-5 or IL-6 impact level cloud environments
• Knowledge of cloud security control inheritance and shared responsibility models within DoD IL-5 or IL-6 environments
• Familiarity with Cross Domain Solutions (CDS), data guards, or other information flow control technologies
• Experience with FedRAMP High, CMMC, or DoD IL-5/IL-6 authorizations
• Experience integrating security tooling (e.g., SIEMs, vulnerability scanners, audit/logging systems) into development workflows
• Understanding of zero trust architectures and modern identity solutions applied to classified environments

Work Environment

• This role will be onsite in Denver, CO (preferred) or Long Beach, CA
• Fast-paced, mission-critical environment supporting national security space operations
• Requires coordination across distributed teams including spacecraft engineers, ground operations, and government partners
• May require participation in on-call rotation for security incident response and mission-critical system support
• High degree of autonomy and ownership as a trusted, cleared team member
• Occasional travel to government sites, launch facilities, or partner locations may be required

What We Offer

• Competitive salary commensurate with experience and clearance level
• Opportunity to drive security posture for cutting-edge space systems with national security impact
• Professional development support including conferences, training, and security certifications
• Collaborative culture working alongside spacecraft engineers, mission operators, and experienced security professionals
• Equity + Benefits including Health, Dental, Vision, HRA/HSA options, PTO and paid holidays, 401K, Parental Leave

Compensation

• Colorado Base Salary: $120,000-170,000
• California Base Salary: $125,000-180,000 for Long Beach
• Equity + Benefits including Health, Dental, Vision, HRA/HSA options, PTO and paid holidays, 401K, Parental Leave
• Your actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, location, and experience.

To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR), you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State.

To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR) you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State.

True Anomaly is committed to equal employment opportunity on any basis protected by applicable state and federal laws. If you have a disability or additional need that requires accommodation, please do not hesitate to let us know.