Senior Cybersecurity Engineer

Telemetry Today LLC; Berthoud (CO); On-site; USD 128,000 - 160,000; Full time

Benefits offered by this job

Unlimited PTO

Paid parental leave

Medical, dental & vision insurance

401(k) with company match

Employee assistance program (EAP)

Job summary

Ursa Major is seeking a Senior Cybersecurity Engineer (Level 3 w/ Clearance) to join our Digital Operations team in Colorado. You will bridge enterprise operations with trusted defense program execution, guiding hardware, software, and manufacturing teams through complex security environments while keeping innovation fast.

Role requires DoD clearance, 4+ years in DoD or cleared environments, and IAM/IAT Level II/III certification.

Qualifications

• Active DoD clearance with readiness for Top Secret/SCI eligibility is preferred.
• Experience implementing RMF, NIST SP 800-53, and JSIG in classified environments.
• Hands-on security engineering across RMF/NIST controls for hardware, software, and manufacturing spaces.
• Proven ability to mentor junior staff and collaborate with cross-functional teams.

Responsibilities

• Lead hands-on security engineering across classified enclaves, air-gapped networks, and secure labs.
• Execute RMF/JSIG lifecycle tasks including STIG hardening and SCAP scanning.
• Manage security controls (EDR, SIEM, firewalls, identity platforms) across enterprise and classified networks.
• Partner with program managers and engineers to enable secure data flows with minimal friction.
• Provide technical guidance to non-cyber stakeholders and maintain compliance momentum.

Skills

Cybersecurity engineering

RMF

NIST SP 800-171

CMMC Level 2

Vulnerability management

EDR/SIEM administration

Leadership

Education

DoD 8570/8140 IAM/IAT Level II or III certification

Tools

SCAP tooling

ACAS/Tenable

eMASS

STIGs

Job description

The future of aerospace and defense starts here.

Ursa Major was founded to revolutionize how America and its allies access and apply high-performance propulsion, from hypersonics to solid rocket motors, satellite maneuvering and launch. We design and deliver propulsion and defense systems that solve the most urgent and critical national security demands.

Ursa Major was founded to revolutionize how America and its allies access and apply high-performance propulsion, from hypersonics to solid rocket motors, satellite maneuvering and launch. We design and deliver propulsion and defense systems that solve the most urgent and critical national security demands.

We are bringing a new model to space access: one in which every link in an enormous value chain isn’t limited by those around it. We design rocket engines and propulsion solutions.

Our products and technologies require an extraordinary team—one that will ensure the security of tomorrow’s technologies while deploying today’s best. We are an intrinsically motivated team with a passion for solving problems and empowering each other every day.

About the Role:

As aSenior Cybersecurity Engineer (Level 3 w/ Clearance) within our Digital Operations team, you won’t just be monitoring alerts or checking compliance boxes. You will be a hands‑on technical problem solver and trusted advisor who bridges the gap between commercial enterprise operations and cleared defense program execution—helping our hardware, software, and manufacturing engineers navigate complex security environments without slowing down the pace of innovation.

Reporting up through Digital Operations, you will sit at the intersection of DevOps, Digital Manufacturing, Software Engineering, Zero‑Trust Networking, and IT. As Ursa Major scales from 380 to 500+ employees and doubles our cleared cybersecurity bench, you will play a central role in both evolving our CMMC Level 2 posture and maintaining hands‑on security engineering across classified spaces, secure labs, and air‑gapped networks

Responsibilities:

• Partner directly with non-cyber employees (program managers, propulsion engineers, test stand operators, cleared defense leads) to understand their workflows and help them safely manage CUI and classified data flows without unnecessary friction.
• Approach security challenges with nuance rather than black‑and‑white rules. Find pragmatically secure pathways that satisfy federal requirements (RMF, NIST SP 800‑53, NIST SP 800‑171) while keeping physical hardware engineering, CAD/CAM development, and classified testing moving forward.
• Design controls around engineering workflows to eliminate latency and operational bottlenecks, ensuring compliance feels like an accelerator rather than a roadblock.
• Classified Systems & Hybrid Security Engineering
  • Lead hands‑on security engineering, vulnerability management, and continuous monitoring across classified program enclaves, air‑gapped networks, and secure testing environments.
  • Execute Risk Management Framework (RMF) and JSIG lifecycle tasks—including system hardening using STIGs/SCAP, vulnerability scanning (ACAS/Tenable), eMASS package management, System Security Plan (SSP) authoring, and POA&M remediation.
  • Manage and optimize technical security controls (EDR, SIEM log aggregation, firewalls, identity platforms) across both enterprise and classified network environments.
• Leadership & Technical Ownership (Level 3)
  • Act as a subject matter expert who tackles ambiguous, high‑complexity security segmentation challenges with minimal supervision, taking full ownership from diagnosis to resolution.
  • Partner with physical security, FSO, and ISSM staff to support secure facility operations, media sanitization, DCSA audit readiness, and classified authorization packages.
  • Provide technical guidance and mentorship to junior staff and IT team members, translating complex federal regulations into clear, actionable advice for non‑cyber stakeholders.

Minimum Qualifications:

• Active DoD Secret clearance required (Top Secret or TS/SCI eligibility highly preferred).
• 4+ years of dedicated cybersecurity engineering experience in DoD, cleared defense contractor, or high‑rigor regulated environments.
• Current DoD 8570/8140 IAM/IAT Level II or III certification (e.g., Security+, CISSP, CISM, CASP+, or CySA+).
• Deep familiarity with government regulations, specifically NIST SP 800‑171, CMMC Level 2, NIST SP 800‑53, RMF, and JSIG requirements.
• Demonstrated experience executing STIG hardening, SCAP compliance scanning, vulnerability remediation, and EDR/SIEM administration across air‑gapped or classified Windows/Linux environments.
• Proven track record of working constructively with engineering and business stakeholders—focusing on trust‑building, communication, and enabling business outcomes rather than simple ticket‑taking.

Colorado law requires us to tell you the base compensation range of this role, which is $128,000 - $160,000, determined by your education, experience, knowledge, skills, and abilities. What we can't quantify for you are the exciting challenges, supportive team, and amazing culture we enjoy.

Classification: Full‑time Exempt

Benefits Include: (Please note, Interns are not eligible for benefits)

• Unlimited PTO - Vacation, Sick, Personal, and Bereavement
• Paid Parental and Adoptive Leave
• Medical, Dental and Vision Insurance
• Tax Advantage Accounts (HSA/FSA)
• Employer Paid Short and Long Term Disability, Basic Life, AD&D
• Additional Benefit Options Including Voluntary Life and Emergency Medical Transport
• EAP Program
• Retirement Savings Plan - 401k with Company Match

NOTE:

Research suggests that women and BIPOC individuals may self‑select out of opportunities if they don't meet 100% of the job requirements. We encourage anyone who believes they have the skills and the drive necessary to succeed here to apply for this role.

Must be a U.S. Person (this includes U.S. Citizens and Permanent Residents).

Eligibility to obtain and maintain a U.S. Security Clearance.

We're an equal‑opportunity employer. You will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran, or disability status.