Senior Security Risk Analyst

Muon Space, Inc.; Central City (CO); Hybride; USD 154 000 - 207 000; Plein temps

Avantages offerts par ce poste

Equity grant

Comprehensive benefits package

Paid vacation and holidays

Résumé du poste

Muon Space, Inc. is seeking a Senior Security Risk Engineer to join the Security Engineering & IT team. You will focus on risk across the organization, running assessments, prioritizing actions, and driving remediation with cross-functional teams.

You’ll map risks to NIST 800-171, ITAR/EAR, and related controls while reporting trends to leadership. The role supports a flexible work model (on-site in San Jose, hybrid, or remote from an approved U.S.

Qualifications

• 5+ years in information security, security engineering, or risk/GRC roles.
• Hands-on experience running security risk assessments and managing a risk register.
• Familiarity with security risk frameworks and methodologies (e.g., NIST RMF/800-30, FAIR).
• Knowledge of compliance frameworks such as NIST 800-171, CMMC, SOC 2, ISO 27001.

Responsabilités

• Lead security risk assessments across the company—identify, analyze, and prioritize risks across all functions.
• Maintain a risk register and provide leadership with a current risk posture view.
• Drive remediation with owners and track closure of identified risks.

Connaissances

Risk assessment

Security frameworks

Compliance awareness

Communication

Description du poste

About the Role

Muon seeks a Senior Security Risk Engineer to join our Security Engineering & IT team. The ideal candidate brings deep expertise across multiple security domains and can operate independently to protect Muon’s infrastructure, data, and people. You will focus on security risk — identifying, assessing, and helping address risks across our environment and every company function, from engineering and IT to operations, finance, and the supply chain. You will run risk assessments, prioritize what matters most, drive remediation with the teams that own it, and give leadership a clear, current picture of Muon's risk posture, including compliance efforts such as NIST 800-171 and ITAR/EAR.

This position may be fully on-site at our San Jose office, hybrid, or fully remote from an approved U.S. location.

Responsibilities

• Lead security risk assessments across the company — identify, analyze, and prioritize risks across engineering, IT, operations, and business functions
• Maintain a risk register and a clear, current view of Muon's risk posture for leadership
• Partner with teams across the company to drive remediation of identified risks and track them to closure
• Assess the security risk of new tools, vendors, third parties, and architectural or process changes before adoption
• Define and apply a consistent risk framework and methodology — likelihood and impact scoring, risk acceptance, and exceptions
• Map risks and controls to compliance requirements such as NIST 800-171 and CMMC, and support audits and assessments
• Report risk trends and metrics to leadership and recommend where to invest to reduce the most risk
• Help teams build risk-aware processes and take ownership of the risks they hold

Qualifications

• 5+ years in information security, security engineering, or security risk/GRC roles
• Hands-on experience running security risk assessments and managing a risk register
• Strong understanding of security risk frameworks and methodologies (e.g., NIST RMF / 800-30, FAIR, or similar)
• Familiarity with compliance frameworks such as NIST 800-171, CMMC, SOC 2, or ISO 27001
• Excellent written and verbal communication skills — able to convey risk and priorities to both engineers and leadership

Nice-to-Have Skills

• Relevant certifications (CISSP, CRISC, CISA, or similar)
• Background in environments subject to ITAR/EAR export control requirements

Salary

The salary range for this role is $154,000 - $207,000, plus a competitive equity grant and comprehensive benefits package. Final compensation will be determined based on skills, qualifications, experience, and geographic location as assessed during the interview process.

About Muon Space

Founded in 2021, Muon Space is an end-to-end Space Systems Provider that designs, builds, and operates LEO satellite constellations delivering mission-critical data. Our revolutionary, integrated technology stack enables customers to optimize every dimension of their missions for faster time-to-orbit and superior constellation remote sensing performance. Our state-of-the-art facility in the heart of Silicon Valley is optimized for manufacturing spacecraft and rapid, flexible payload integration at scale. From climate monitoring to national security, Muon Space is dedicated to delivering Earth Intelligence for a safer and more resilient world.

Taking Care of Our Team

At Muon salary is only part of our total compensation package. In addition to salary, full-time employees receive equity compensation as well as benefits including medical, dental, and vision insurance, a 401k retirement plan, short & long term disability and life insurance. We also offer three weeks paid vacation for new employees, along with 12 paid holidays, unlimited sick time and paid parental leave.

Our mission embraces the entire planet and we believe our team should too. Muon is dedicated to creating a diverse and dynamic company and workforce. We believe in equal employment opportunity regardless of race, color, ancestry, religion, sex, age, national origin, citizenship, sexual orientation, marital status, disability, or gender identity. We value diversity in the workplace, and that starts with our applicants. In addition, if you need a reasonable accommodation as part of your application for employment or interviews with us, please let us know.

Muon is currently registered and able to hire in the following states:
AL, AZ, CA, CO, CT, DC, FL, GA, IL, IA, ID, MD, MA, MI, MN, MO, NJ, NY, NC, OH, OR, PA, TN, TX, VT, VA, WA

ITAR/EAR Requirements

This position requires access to export controlled information. To conform to U.S. Government export regulations applicable to that information, applicant must either be (A) a U.S. person, defined as a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (green card holder), (iii) refugee under 8 U.S.C. § 1157, or (iv) asylee under 8 U.S.C. § 1158, (B) eligible to access the export controlled information without a required export authorization, or (C) eligible and reasonably likely to obtain the required export authorization from the applicable U.S. government agency. The Company may, for legitimate business reasons, decline to pursue any export licensing process.