Senior IT Security Engineer - Mission System Cybersecurity & Compliance | Lunar Outpost

EVONA; Denver (CO); On-site; USD 140,000 - 210,000; Full time

Benefits offered by this job

Health coverage

Paid time off

401(k) match

Holidays

Parental leave

Educational reimbursement

Job summary

Lunar Outpost is seeking a Mission System Cybersecurity Engineer to help secure its space mission systems and ground infrastructure in a dynamic startup environment. You will lead security controls, risk management, and compliance across the mission lifecycle, with emphasis on NIST/NIST RMF, ITAR, and government contracting requirements.

The ideal candidate brings strong cloud, OS, networks, and incident response expertise, plus experience in governance, risk management, and security audits.

Qualifications

• Bachelor’s or Master’s in engineering, CS, cybersecurity, IT, or related field.
• 6+ years in cybersecurity, governance, risk management, or compliance.
• Experience with security compliance audits and frameworks.
• Knowledge of system engineering processes (requirements, architecture, design, V&V) applied to cyber-systems.
• Strong cloud, OS, networks, security controls, vulnerability scanning, and incident response skills.
• Familiarity with NIST, RMF, ISO and mission assurance concepts.
• Able to work cross-functionally with strong written and verbal communication.

Responsibilities

• Stand up and maintain security controls aligned to NIST 800-171, FARS/DFARS, NIST 800-53 and ITAR.
• Decompose and trace cybersecurity requirements into architecture, design, implementation, test and verification.
• Design, implement, monitor, and maintain security controls in mission systems.
• Lead or assist audits; ensure audit readiness and remediation.
• Manage SSPs, POA&Ms, SCTMs and evidence for authorization.
• Lead or contribute to incident response, forensics, security monitoring, and remediation.
• Support training and awareness programs to foster security culture.
• Evaluate tools for log monitoring (SIEM), DLP, and secure configurations.
• Plan for resilience and survivability of mission systems against evolving threats.
• Collaborate with IT and compliance teams in GRC.

Skills

Cloud architecture

Operating systems

Networking

Security controls

Vulnerability scanning

Incident response

Written and verbal communication

Education

Bachelor's degree in engineering / CS / cybersecurity / IT

Master's degree

Job description

Are you passionate about shaping the future of humanity's presence in space? Our client, Lunar Outpost, an industry leader in space robotics and planetary vehicles, invites you to join their team! Lunar Outpost is dedicated to creating a permanent presence in space while also driving positive impacts here on Earth.

We are currently seeking a Mission System Cybersecurity Engineer to contribute to the mission in a dynamic startup environment.

The Mission System Cybersecurity Engineer will play a key role in developing and deploying the Lunar Outpost Mission System. They will be responsible for ensuring the security, resilience, and compliance of mission and ground systems throughout their lifecycle. This role integrates cybersecurity principles into system design, development, and operations to protect mission data, assets, and critical infrastructure. They will take the lead on ensuring compliance of the Lunar Outpost Mission System against the NIST 800-53 framework. They will assist in developing strategies for maintaining requirements and contract obligations, among which will be assisting in the production of SSPs and POA&Ms. The ideal candidate will bring with them a thorough understanding of security architecture, risk management, US government contracting, controlled environments, and a readiness to work in a dynamic but pragmatic startup environment.

Take the #NextLeap with Lunar Outpost and work on the Pegasus LTV, which will carry NASA astronauts farther than they've ever been before on the lunar surface!

Key Responsibilities:

• Stand up and maintain security controls aligned to established frameworks and requirements
• such as NIST 800-171, FARS/DFARS, NIST 800-53 and ITAR
• Develop, decompose, and trace cybersecurity requirements into architecture, design, implementation, test and verification activities of the mission system.
• Design, implement, monitor, and maintain security controls in mission systems – including configuration reviews, continuous monitoring, incident response, role-based access controls, etc.
• Lead or assist in internal and external security compliance audits; ensure audit readiness and timely remediation of findings
• Manage security and compliance documentation including SSPs, POA&Ms,
• Security Control Traceability Matrices (SCTM) and provide evidence of cybersecurity compliance/supporting authorization for operation.
• Lead or contribute to incident response, forensics, security monitoring, and remediation when cybersecurity incidents or vulnerabilities are discovered.
• Support training and awareness programs to foster a culture of security across the organization
• Evaluate and implement tools for log monitoring (e.g., SIEM), DLP, and secure configurations
• Plan for and implement resilience, survivability, maintainability, and upgradability of mission systems in the face of evolving cybersecurity threats.
• Partner with other compliance teams and the IT Manager to administrate and track work within a GRC

Required Qualifications:

• Bachelor’s or Master’s
• Degree in engineering, computer science, cybersecurity, Information Technology, related discipline or relevant experience
• Bachelor’s Degree: 6+ years of direct experience in cybersecurity, governance, risk management, or compliance roles
• Master’s Degree: 4+ years of direct experience in cybersecurity, governance, risk management, or compliance roles
• Experience with security compliance audits and frameworks
• A deep sense of accountability for your project decisions and actions
• Experience with system engineering processes (requirements, architecture, design, V&V) applied to cyber-systems.
• Strong technical skills in cloud architecture, operating systems, networks, security controls, vulnerability scanning, and incident response.
• Familiarity with relevant cyber standards/frameworks (e.g., NIST, RMF, ISO) and mission assurance/survivability concepts. sewp.nasa.gov+1
• Ability to work cross-functionally, with strong written and verbal communication, documentation skills, and the ability to influence engineering teams.
• Self-motivated, focused, and driven to meet critical deadlines
• Excellent organization and time management skills
• Excellent written and oral communication skills
• U.S. Person

Preferred Qualifications:

• Familiarity with cloud security and compliance in AWS/AWS GovCloud environments
• Security certifications (e.g., CISSP, Security+)
• Experience with aerospace/space/mission systems context or defense environment.
• Experience in the design, development and maintenance for cloud-based architecture supporting critical operations.
• Performed a leadership role or served directly on a team that went through a full security audit

Compensation & Benefits:

Compensation level and base salary are competitively structured and thoughtfully determined based on factors such as relevant skills, experience, education, and the scope of the role.

• Comprehensive health coverage: Medical, dental, and vision benefits, with 70% of premiums covered by the employer
• Paid time off: Three (3) weeks per year of vacation
• Retirement plan: Up to 4% employer match on 401(k) contributions
• Paid holidays: 11 company-recognized holidays
• Parental leave
• Educational reimbursement opportunities to support company objectives, continued learning, and career development

Lunar Outpost Inc. is an equal opportunity employer. Lunar Outpost Inc. does not discriminate on the basis of race, color, religion, sex (including pregnancy, sexual orientation, and gender identity), national origin, ethnicity, age, disability, veteran status, genetic information, or any other characteristic protected by applicable law. All employees, including executives and human resources personnel, are expected to conduct themselves with professionalism and treat others with dignity and respect in accordance with this policy.