Senior Cybersecurity Engineer

Blue Origin; Denver (CO); On-site; USD 140,000 - 190,000; Full time

Job summary

Blue Origin is seeking a Senior Cybersecurity Engineer to design, implement, and harden security across classified enclaves, mission ground systems, and labs. You will drive RMF accreditation, develop secure engineering playbooks, and mentor junior engineers while ensuring continuous monitoring and compliance on mission-focused schedules.

The role emphasizes ownership over systems and enacting security controls from architecture through operation, with on-call incident response and ongoing

Responsibilities

• Engineer and harden security architecture across classified enclaves, mission ground systems, and lab environments (network segmentation, IAM, endpoint hardening, logging, encryption at rest and in transit).
• Drive accreditation: author/maintain SSPs, risk assessments, POA&Ms; take systems through RMF to ATO/ATC and maintain compliance via continuous monitoring.
• Defend the environment: perform vulnerability scanning, patch management, log review and audit reduction, triage security events with SOC.
• Respond to incidents: participate in on-call rotation, investigate, contain, and document incidents, drive corrective actions to closure with system owners.

Job description

Application close date:

Applications will be accepted on an ongoing basis until the requisition is closed.

At Blue Origin, we envision millions of people living and working in space for the benefit of Earth. We're working to develop reusable, safe, and low-cost space vehicles and systems within a culture of safety, collaboration, and inclusion. Join our team of problem solvers as we add new chapters to the history of spaceflight!

The role is part of the In-Space Systems business unit, which is focused on addressing two of the most compelling challenges in spaceflight today: space infrastructure and increasing mobility on-orbit.

Blue National Security (BNS) builds and operates space systems for the Intelligence Community and Department of Defense. The classified enclaves, mission ground systems, and labs behind those missions have to be secure, accredited, and available every time.

We're looking for aSenior Cybersecurity Engineerto do that work hands-on. You'll engineer and harden the systems our programs depend on, drive them through accreditation, and stand watch over them once they're operational.

This is a builder's role on a team that is still writing its own playbooks. You'll have real ownership over specific systems and enclaves, and direct influence over the standards the rest of the team adopts.

What You'll Do

• Engineer and harden.Implement security architecture across classified enclaves, mission ground systems, and lab environments - network segmentation, identity and access management, endpoint hardening, logging and audit, and encryption at rest and in transit.
• Drive accreditation.Author and maintain SSPs, security control implementation statements, risk assessments, and POA&Ms. Take systems through RMF to ATO and ATC, then keep them compliant through continuous monitoring.
• Defend the environment.Perform vulnerability scanning and remediation, patch management, log review and audit reduction, and triage of security events alongside the enterprise SOC.
• Respond to incidents.Participate in the on-call rotation. Investigate, contain, and document incidents, and drive corrective actions to closure with system owners.
• Automate the toil.Build the scripting and tooling that make compliance evidence, STIG application, and reporting repeatable rather than manual.
• Support the mission directly.Work shoulder-to-shoulder with program engineers and system administrators to deliver secure systems on mission schedule - finding the compliant path to YES.
• Raise the bar.Mentor junior engineers and analysts, and contribute to team standards, baselines, and accreditation playbooks.

Minimum Qualifications