Staff Enterprise Security Engineer

True Anomaly, Inc.; Denver (CO); On-site; USD 170,000 - 245,000; Full time

Benefits offered by this job

Best-in-class health care

Generous time off

Daily catered lunch

Equity participation

401(k) retirement plan

Job summary

True Anomaly, Inc. is hiring a Staff Enterprise Security Engineer to architect, deploy, and manage advanced threat detection and incident response configurations across our on-prem and cloud environments.

You will contribute to our spacecraft modeling and simulation software security, owning greenfield security initiatives and safeguarding critical systems. The role emphasizes securing complex systems, collaborating with cross-functional teams, and delivering resilient security measures in a

Qualifications

• Minimum of 8 years in information security with a focus on security engineering.
• Proficiency with SIEM, IDS/IPS, vulnerability scanners, and endpoint protection.
• Deep understanding of common vulnerabilities and how to exploit them.
• Strong engineering understanding of on-prem and SaaS technologies.
• Excellent analytical, problem-solving, and communication skills.
• Working knowledge of Python, Elixir, C, or Rust.
• Ability to work independently and in a fast-paced environment.
• CISSP/CISM/CISA or equivalents are highly desirable.

Responsibilities

• Conduct regular security assessments, vulnerability scans, and risk assessments to identify and mitigate threats.
• Own and implement security hardening for all enterprise and corporate systems.
• Provide subject matter expertise for enterprise and corporate systems security.
• Participate in an on-call rotation for security events.
• Provide vendor recommendations and implementation guidance for management of cloud and on-premise assets.
• Identify deficiencies in the current security program and address them.
• Collaborate with cross-functional teams to integrate security into the lifecycle.
• Monitor and analyze security logs to identify suspicious activity and respond to incidents.
• Assist in developing and maintaining security policies, procedures, and guidelines.
• Stay updated with latest security trends, threats, and tech solutions.
• Provide support to internal stakeholders on compliance and best practices.
• Participate in change management and risk reviews.

Skills

Security engineering

SIEM

IDS/IPS

Vulnerability scanners

Endpoint protection

Python/Elixir/C/Rust

Cloud platforms

Analytical skills

Communication skills

Education

Bachelor's degree or higher in CS/InfoSec

Tools

Azure

AWS

GCP

Job description

Denver, CO or Long Beach, CA or Washington, DC

Space is a warfighting domain. True Anomaly seeks those with the talent and ambition to build the technology that secures it.

OUR MISSION

True Anomaly delivers decisive capabilities for space superiority. We build autonomous spacecraft, advanced payloads, mission software, and space-based interceptors — enabling the U.S. and its Allies to secure the space environment and counter threats from the ultimate high ground.

OUR VALUES

• Be the offset.We create asymmetric advantages with creativity and ingenuity.
• What would it take?We challenge assumptions to deliver ambitious results.
• It’s the people. Our team is our competitive advantage and we are better together.

BENEFITS & PERKS *

• Best-in-class healthcare: 100% company-paid medical, dental, and vision coverage for you and your dependents, with HSA/HRA options
• Generous time off: Flexible Time Off (FTO) for exempt employees, accrued PTO of up to 25 days for non-exempt employees, plus 12 paid holidays; Parental Leave; Sick Leave
• Fuel for your day: Daily catered lunch and unlimited snacks for in-office employees
• And more: 401(k) retirement plan, fitness reimbursement, and Dog Fridays
• Equity participation: Equity is included as part of our total compensation package, giving you an opportunity to share in the company’s success.

*Do not apply to fixed term and temporary roles

YOUR MISSION At True Anomaly, software serves as the central nervous system, seamlessly connecting military objectives, theoretical astrodynamics, and the human and autonomous control of spacecraft with precision. True Anomaly is on a mission to safeguard this intricate system through robust threat detection and incident response. As a Staff Enterprise Security Engineer, your mission will be to architect, deploy, and manage advanced threat detection and incident response configurations. You will directly contribute to the continued evolution of our complex spacecraft modeling and simulation software, ensuring its resilience against emerging cyber threats. Without needing aerospace-specific experience, you'll take ownership of pioneering greenfield projects, securing crucial software that underpins our innovative engineering and product thesis. Your work will help shape the future landscape of space technology and the outcome of future conflicts.

RESPONSIBILITIES

• Conduct regular security assessments, vulnerability scans, and risk assessments to identify and mitigate potential threats.
• Own and implement security hardening for all enterprise and corporate systems.
• Provide subject matter expertise for enterprise and corporate systems security.
• Participate in an on-call rotation for security events.
• Provide vendor recommendations and implementation guidance for management of cloud and on-premise assets.
• Identify deficiencies in the current security program and fill them.
• Collaborate with cross-functional teams to ensure security measures are integrated into the system development lifecycle.
• Monitor and analyze security logs from various sources (e.g., SIEMs, IDS/IPS) to identify suspicious activities and respond to security incidents.
• Assist in the development and maintenance of security policies, procedures, and guidelines.
• Stay updated with the latest security trends, threats, and technology solutions.
• Provide support to internal stakeholders on compliance and security best practices.
• Participate in change management and change review board, identifying risks in implementation process.

QUALIFICATIONS

• Minimum of 8 years of experience in information security, with a focus on security engineering.
• Proficiency with security tools and technologies such as SIEM, IDS/IPS, vulnerability scanners, and endpoint protection.
• Deep understanding of common vulnerabilities and how to exploit them.
• Strong engineering understanding of common enterprise technologies, including on-prem and SaaS.
• Excellent analytical, problem-solving, and communication skills.
• Working knowledge of at least one programming language such as Python, Elixir, C, Rust.
• Ability to work independently and collaboratively in a fast-paced environment.
• Relevant certifications such as CISSP, CISM, CISA, or equivalents are highly desirable.

PREFERRED SKILLS AND EXPERIENCE

• Bachelor’s degree in Computer Science, Information Security, or equivalent professional experience.
• Experience with cloud platforms such as Azure, AWS, or Google Cloud.
• Familiarity with Threat Detection Engineering and security operations practices and tools.
• Experience working at a startup and/or in the defense industry.
• Eligibility to obtain or active TS/SCI clearance.

COMPENSATION

• Washington D.C. Base Salary: $170,000-$245,000
• Equity + Benefits including Health, Dental, Vision, HRA/HSA options, PTO and paid holidays, 401K, Parental Leave

Your actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, location, and experience.
ADDITIONAL REQUIREMENTS

• Work Location—This position will be based onsite in either our Denver, Long Beach, or Washington, D.C. offices.

This position will be open until it is successfully filled. #LI-Onsite

To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR) you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State.

True Anomaly is committed to equal employment opportunity on any basis protected by applicable state and federal laws. If you have a disability or additional need that requires accommodation, please do not hesitate to let us know.

The person hired will have access to information and items controlled by the International Traffic in Arms Regulation (ITAR). To conform to U.S. Government space technology export regulations, including the ITAR, you must be a U.S. citizen, lawful permanent resident of the U.S. (i.e., current Green Card holder), lawfully admitted into the U.S. as a refugee or granted asylum, or be eligible to obtain the required authorizations from the U.S. Department of State.

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in True Anomaly’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval, or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.