Senior Security Risk Engineer - NIST & Compliance

Muonspace; United States; Hybrid; USD 154,000 - 207,000; Full time

Benefits offered by this job

Equity grant

Comprehensive benefits package

3 weeks paid vacation

12 paid holidays

Unlimited sick time

Paid parental leave

Job summary

Muon Space seeks a Senior Security Risk Engineer to join our Security Engineering & IT team. You will lead risk assessments across engineering, IT, operations, and business functions, and maintain a live risk register for leadership.

The role requires deep expertise in security risk frameworks, hands-on assessment experience, and the ability to drive remediation across teams. It includes exposure to NIST 800-171, CMMC, SOC 2, and ISO 27001, with a strong focus on improving Muon Space's security

Qualifications

• 5+ years in information security, security engineering, or security risk/GRC roles.
• Hands-on experience running security risk assessments and managing a risk register
• Strong understanding of security risk frameworks and methodologies (e.g., NIST RMF / 800-30, FAIR, or similar)
• Familiarity with compliance frameworks such as NIST 800-171, CMMC, SOC 2, or ISO 27001
• Excellent written and verbal communication skills — able to convey risk and priorities to both engineers and leadership

Responsibilities

• Lead security risk assessments across the company — identify, analyze, and prioritize risks across engineering, IT, operations, and business functions
• Maintain a risk register and a clear, current view of Muon's risk posture for leadership
• Partner with teams across the company to drive remediation of identified risks and track them to closure
• Assess the security risk of new tools, vendors, third parties, and architectural or process changes before adoption
• Define and apply a consistent risk framework and methodology — likelihood and impact scoring, risk acceptance, and exceptions
• Map risks and controls to compliance requirements such as NIST 800-171 and CMMC, and support audits and assessments
• Report risk trends and metrics to leadership and recommend where to invest to reduce the most risk
• Help teams build risk-aware processes and take ownership of the risks they hold

Skills

5+ years in information security

Hands-on risk assessments

Risk frameworks & methodologies

NIST RMF / 800-30 / FAIR

Communication to engineers & leaders

Job description

Muon Space seeks a Senior Security Risk Engineer to join our Security Engineering & IT team. You will lead risk assessments across engineering, IT, operations, and business functions, and maintain a live risk register for leadership.

The role requires deep expertise in security risk frameworks, hands-on assessment experience, and the ability to drive remediation across teams. It includes exposure to NIST 800-171, CMMC, SOC 2, and ISO 27001, with a strong focus on improving Muon Space's security