Senior Cybersecurity Engineer

Ursa Major; Berthoud (CO); On-site; USD 128,000 - 160,000; Full time

Benefits offered by this job

Unlimited PTO

Parental/Adoptive leave

Medical/Dental/Vision

401k with company match

HSA/FSA

Disability and Life Insurance

Employee Assistance Program

Career development

Job summary

Ursa Major seeks a Senior Cybersecurity Engineer (Level 3 w/ Clearance) to bridge commercial operations and defense program execution. You will lead security engineering across DevOps, Digital Manufacturing, and IT, guiding secure practices while keeping innovation moving.

You will partner with propulsion, software, and hardware teams to manage CUI in classified spaces, drive RMF/JSIG tasks, and mentor junior staff in a fast‑paced environment.

Qualifications

• Active DoD Secret clearance required; TS/SCI preferred.
• 4+ years of dedicated cybersecurity engineering in DoD or cleared environments.
• DoD 8570/8140 IAM/IAT Level II or III certification.
• Deep familiarity with NIST SP 800‑171, CMMC Level 2, NIST SP 800‑53, RMF, and JSIG.
• Experience with STIG hardening, SCAP scans, vulnerability remediation, and EDR/SIEM administration in classified environments.

Responsibilities

• Lead hands‑on security engineering across classified program enclaves, air‑gapped networks, and secure labs.
• Execute RMF and JSIG lifecycle tasks including STIG hardening, SCAP scanning, SSP authoring, and POA&M remediation.
• Provide mentorship and partner with engineering and program stakeholders to enable secure operations.

Skills

Cybersecurity engineering (DoD/cleared

RMF/JSIG experience

STIG/SCAP vulnerability management

EDR/SIEM administration

Vulnerability remediation

Education

DoD 8570/8140 IAM/IAT Level II or III certification

Security+ / CISSP / CISM / CASP+ / CySA+

Tools

ACAS/Tenable

eMASS

SCAP tooling

Job description

The future of aerospace and defense starts here.

Ursa Major was founded to revolutionize how America and its allies access and apply high-performance propulsion, from hypersonics to solid rocket motors, satellite maneuvering and launch. We design and deliver propulsion and defense systems that solve the most urgent and critical national security demands.

Ursa Major was founded to revolutionize how America and its allies access and apply high-performance propulsion, from hypersonics to solid rocket motors, satellite maneuvering and launch. We design and deliver propulsion and defense systems that solve the most urgent and critical national security demands.

We are bringing a new model to space access: one in which every link in an enormous value chain isn't limited by those around it. We design rocket engines and propulsion solutions.

Our products and technologies require an extraordinary team—one that will ensure the security of tomorrow’s technologies while deploying today’s best. We are an intrinsically motivated team with a passion for solving problems and empowering each other every day.

About The Role

As a Senior Cybersecurity Engineer (Level 3 w/ Clearance) within our Digital Operations team, you won't just be monitoring alerts or checking compliance boxes. You will be a hands‑on technical problem solver and trusted advisor who bridges the gap between commercial enterprise operations and cleared defense program execution - helping our hardware, software, and manufacturing engineers navigate complex security environments without slowing down the pace of innovation.

Reporting up through Digital Operations, you will sit at the intersection of DevOps, Digital Manufacturing, Software Engineering, Zero‑Trust Networking, and IT. As Ursa Major scales from 380 to 500+ employees and doubles our cleared cybersecurity bench, you will play a central role in both evolving our CMMC Level 2 posture and maintaining hands‑on security engineering across classified spaces, secure labs, and air‑gapped networks.

Responsibilities

• Stakeholder Enablement & Creative Risk Mitigation
  • Partner directly with non‑cyber employees (program managers, propulsion engineers, test stand operators, cleared defense leads) to understand their workflows and help them safely manage CUI and classified data flows without unnecessary friction.
  • Approach security challenges with nuance rather than black‑and‑white rules. Find pragmatically secure pathways that satisfy federal requirements (RMF, NIST SP 800‑53, NIST SP 800‑171) while keeping physical hardware engineering, CAD/CAM development, and classified testing moving forward.
  • Design controls around engineering workflows to eliminate latency and operational bottlenecks, ensuring compliance feels like an accelerator rather than a roadblock.
• Classified Systems & Hybrid Security Engineering
  • Lead hands‑on security engineering, vulnerability management, and continuous monitoring across classified program enclaves, air‑gapped networks, and secure testing environments.
  • Execute Risk Management Framework (RMF) and JSIG lifecycle tasks—including system hardening using STIGs/SCAP, vulnerability scanning (ACAS/Tenable), eMASS package management, System Security Plan (SSP) authoring, and POA&M remediation.
  • Manage and optimize technical security controls (EDR, SIEM log aggregation, firewalls, identity platforms) across both enterprise and classified network environments.
• Leadership & Technical Ownership (Level 3)
  • Act as a subject matter expert who tackles ambiguous, high‑complexity security segmentation challenges with minimal supervision, taking full ownership from diagnosis to resolution.
  • Partner with physical security, FSO, and ISSM staff to support secure facility operations, media sanitization, DCSA audit readiness, and classified authorization packages.
  • Provide technical guidance and mentorship to junior staff and IT team members, translating complex federal regulations into clear, actionable advice for non‑cyber stakeholders.

Minimum Qualifications

• Active DoD Secret clearance required (Top Secret or TS/SCI eligibility highly preferred).
• 4+ years of dedicated cybersecurity engineering experience in DoD, cleared defense contractor, or high‑rigor regulated environments.
• Current DoD 8570/8140 IAM/IAT Level II or III certification (e.g., Security+, CISSP, CISM, CASP+, or CySA+).
• Deep familiarity with government regulations, specifically NIST SP 800‑171, CMMC Level 2, NIST SP 800‑53, RMF, and JSIG requirements.
• Demonstrated experience executing STIG hardening, SCAP compliance scanning, vulnerability remediation, and EDR/SIEM administration across air‑gapped or classified Windows/Linux environments.
• Proven track record of working constructively with engineering and business stakeholders—focusing on trust‑building, communication, and enabling business outcomes rather than simple ticket‑taking.

Colorado law requires us to tell you the base compensation range of this role, which is $128,000 - $160,000, determined by your education, experience, knowledge, skills, and abilities. What we can't quantify for you are the exciting challenges, supportive team, and amazing culture we enjoy.

Classification: Full‑time Exempt

Benefits Include

• Unlimited PTO - Vacation, Sick, Personal, and Bereavement
• Paid Parental and Adoptive Leave
• Medical, Dental and Vision Insurance
• Tax Advantage Accounts (HSA/FSA)
• Employer Paid Short and Long Term Disability, Basic Life, AD&D
• Additional Benefit Options Including Voluntary Life and Emergency Medical Transport
• EAP Program
• Retirement Savings Plan - 401k with Company Match

NOTE

Research suggests that women and BIPOC individuals may self‑select out of opportunities if they don't meet 100% of the job requirements. We encourage anyone who believes they have the skills and the drive necessary to succeed here to apply for this role.

Must be a U.S. Person (this includes U.S. Citizens and Permanent Residents).

Eligibility to obtain and maintain a U.S. Security Clearance.

We're an equal‑opportunity employer. You will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran, or disability status.