Senior Cybersecurity Engineer

Ursa Major; Loveland (CO); Hybrid; USD 130,000 - 162,000; Full time

Benefits offered by this job

Unlimited PTO

Parental and adoptive leave

Medical, dental, and vision insurance

HSA/FSA tax-advantaged accounts

Disability and life insurance

401k with company match

Equity grants

Employee Assistance Program

Job summary

Ursa Major is seeking a Senior Cybersecurity Engineer (Level 3) to join our Digital Operations team in a hybrid-capable role. You’ll bridge DevOps, manufacturing, software engineering, and IT to scale our secure hybrid enclave and advance CMMC Level 2 compliance while enabling rapid innovation across hardware and software domains.

Join a fast-growing team protecting critical national-security assets with a cloud-to-on‑premise security strategy, and mentor colleagues to implement pragmatic,

Qualifications

• 4+ years of dedicated cybersecurity engineering experience in regulated or high‑rigor environments.
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or equivalent practical experience.
• Deep familiarity with government contracting regulations, specifically NIST SP 800-171 and CMMC Level 2.
• Demonstrated experience implementing security controls in hybrid IT/OT or cloud‑and‑physical hardware environments (e.g., site‑to‑site VPNs, micro‑segmentation, local device controls).
• Proven track record of working constructively with engineering and business stakeholders—focusing on trust‑building, communication, and enabling business outcomes.

Responsibilities

• Partner directly with non-cyber employees (program managers, manufacturing engineers, test stand operators) to understand workflows and help safely manage CUI and new tools.
• Approach security challenges with nuance to satisfy federal requirements while keeping hardware engineering and CAD/CAM moving forward.
• Design controls around engineering workflows to eliminate latency and bottlenecks, making compliance feel like an accelerator.

Skills

Cybersecurity

Regulated environments

Stakeholder collaboration

Education

Bachelor’s degree in Cybersecurity/IT/CS

Tools

SIEM

Firewalls

Zero-trust networking

Identity platforms

Vulnerability management

Site-to-site VPNs

Micro-segmentation

Job description

The future of aerospace and defense starts here.

Ursa Major was founded to revolutionize how America and its allies access and apply high-performance propulsion, from hypersonics to solid rocket motors, satellite maneuvering and launch. We design and deliver propulsion and defense systems that solve the most urgent and critical national security demands.

We are bringing a new model to space access: one in which every link in an enormous value chain isn’t limited by those around it. We design rocket engines and propulsion solutions.

Our products and technologies require an extraordinary team—one that will ensure the security of tomorrow’s technologies while deploying today’s best. We are an intrinsically motivated team with a passion for solving problems and empowering each other every day.

As a Senior Cybersecurity Engineer (Level 3) within our Digital Operations team, you won’t just be monitoring alerts or checking compliance boxes. You will be a hands‑on problem solver and trusted advisor who helps our hardware, software, and manufacturing engineers navigate complex security environments—including Controlled Unclassified Information (CUI)—without slowing down the pace of innovation.

Reporting up through Digital Operations, you will sit at the intersection of DevOps, Digital Manufacturing, Software Engineering, Zero-Trust Networking, and IT. As Ursa Major scales from 380 to 500+ employees by EOY 2026, you will play a central role in evolving our CMMC Level 2 posture—leading the strategic transition from a cloud-only enclave to a high-performing hybrid enclave that integrates on-premise hardware, lab equipment, and manufacturing environments smoothly and securely.

Responsibilities

• Stakeholder Enablement & Creative Risk Mitigation
  • Partner directly with non-cyber employees (program managers, manufacturing engineers, test stand operators) to understand their workflows and help them safely manage CUI and new tools without fear or unnecessary friction.
  • Approach security challenges with nuance rather than black‑and‑white rules. Find pragmatically secure pathways that satisfy federal requirements while keeping physical hardware engineering and CAD/CAM development moving forward.
  • Design controls around engineering workflows to eliminate latency and operational bottlenecks, ensuring compliance feels like an accelerator rather than a roadblock.
• Hybrid CMMC L2 Expansion & Security Engineering
  • Lead the technical implementation to strategically expand our CMMC Level 2 boundary beyond our cloud‑only enclave—safely integrating on‑premise infrastructure, physical testing equipment, and shop floor operations without expanding CMMC scope to the entire enterprise network.
  • Manage and optimize technical security controls (SIEM, firewalls, zero‑trust network access, identity platforms, vulnerability management) across both cloud and physical network environments.
  • Evolve key compliance artifacts—including System Security Plans (SSPs), Risk Assessment Reports (RARs), and POA&Ms—ensuring physical site boundaries and hybrid hardware data flows are accurately documented.
• Leadership & Technical Ownership (Level 3)
  • Act as a subject matter expert who tackles ambiguous, high‑complexity security and network segmentation challenges with minimal supervision, taking full ownership from diagnosis to resolution.
  • Work side‑by‑side with Zero‑Trust Networking, DevOps, and IT to embed micro‑segmentation and physical device controls directly into manufacturing environments and automated pipelines.
  • Provide technical guidance and mentorship to junior staff and IT team members, translating complex federal regulations into clear, actionable advice for non‑cyber stakeholders.

Minimum Qualifications

• 4+ years of dedicated cybersecurity engineering experience in regulated or high‑rigor environments.
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or equivalent practical experience.
• Deep familiarity with government contracting regulations, specifically NIST SP 800-171 and CMMC Level 2 framework requirements.
• Demonstrated experience implementing security controls in hybrid IT/OT or cloud‑and‑physical hardware environments (e.g., site‑to‑site VPNs, micro‑segmentation, local device controls).
• Proven track record of working constructively with engineering and business stakeholders—focusing on trust‑building, communication, and enabling business outcomes rather than simple ticket‑taking.

Preferred Qualifications

• Master’s degree in a technical field; active CISSP, CISM, CISA, or CRISC certifications.
• Direct experience participating in or maintaining a C3PAO CMMC assessment environment.
• Ability to obtain and maintain a U.S. Government Security Clearance.

Colorado law requires us to tell you the base compensation range of this role, which is $130,000 - $162,000, determined by your education, experience, knowledge, skills, and abilities. The salary range for this role is intentionally wide as we are evaluating individuals based on their unique experience and abilities to fit our needs. Most importantly, we are excited to meet you and see if you are a great fit for our team. What we can’t quantify for you are the exciting challenges, supportive team, and amazing culture we enjoy.

Classification: Full-Time, Exempt

Benefits Include: (Please note, Interns are not eligible for benefits)

• Unlimited PTO - Vacation, Sick, Personal, and Bereavement
• Paid Parental and Adoptive Leave
• Medical, Dental and Vision Insurance
• Tax Advantage Accounts (HSA/FSA)
• Employer Paid Short and Long Term Disability, Basic Life, AD&D
• Additional Benefit Options Including Voluntary Life and Emergency Medical Transport
• EAP Program
• Retirement Savings Plan - 401k with Company Match
• Equity Grants in the Company

Must be a U.S. Person (this includes U.S. Citizens and Permanent Residents)

Eligibility to obtain and maintain a U.S. Security Clearance

We’re an equal‑opportunity employer. You will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran, or disability status.