Senior Cybersecurity Engineer

About the role

The future of aerospace and defense starts here.

Ursa Major was founded to revolutionize how America and its allies access and apply high-performance propulsion, from hypersonics to solid rocket motors, satellite maneuvering and launch. We design and deliver propulsion and defense systems that solve the most urgent and critical national security demands.

We are bringing a new model to space access: one in which every link in an enormous value chain isn't limited by those around it. We design rocket engines and propulsion solutions.

Our products and technologies require an extraordinary team-one that will ensure the security of tomorrow's technologies while deploying today's best. We are an intrinsically motivated team with a passion for solving problems and empowering each other every day.

About the Role

As a Senior Cybersecurity Engineer (Level 3 w/ Clearance) within our Digital Operations team, you won't just be monitoring alerts or checking compliance boxes. You will be a hands-on technical problem solver and trusted advisor who bridges the gap between commercial enterprise operations and cleared defense program execution-helping our hardware, software, and manufacturing engineers navigate complex security environments without slowing down the pace of innovation.

Reporting up through Digital Operations, you will sit at the intersection of DevOps, Digital Manufacturing, Software Engineering, Zero-Trust Networking, and IT. As Ursa Major scales from 380 to 500+ employees and doubles our cleared cybersecurity bench, you will play a central role in both evolving our CMMC Level 2 posture and maintaining hands-on security engineering across classified spaces, secure labs, and air-gapped networks

Responsibilities

• Stakeholder Enablement & Creative Risk Mitigation
• Partner directly with non-cyber employees (program managers, propulsion engineers, test stand operators, cleared defense leads) to understand their workflows and help them safely manage CUI and classified data flows without unnecessary friction.
• Approach security challenges with nuance rather than black-and-white rules. Find pragmatically secure pathways that satisfy federal requirements (RMF, NIST SP 800-53, NIST SP 800-171) while keeping physical hardware engineering, CAD/CAM development, and classified testing moving forward.
• Design controls around engineering workflows to eliminate latency and operational bottlenecks, ensuring compliance feels like an accelerator rather than a roadblock.
• Classified Systems & Hybrid Security Engineering
• Lead hands-on security engineering, vulnerability management, and continuous monitoring across classified program enclaves, air-gapped networks, and secure testing environments.
• Execute Risk Management Framework (RMF) and JSIG lifecycle tasks-including system hardening using STIGs/SCAP, vulnerability scanning (ACAS/Tenable), eMASS package management, System Security Plan (SSP) authoring, and POA&M remediation.
• Manage and optimize technical security controls (EDR, SIEM log aggregation, firewalls, identity platforms) across both enterprise and classified network environments.
• Leadership & Technical Ownership (Level 3)
• Act as a subject matter expert who tackles ambiguous, high-complexity security segmentation challenges with minimal supervision, taking full ownership from diagnosis to resolution.
• Partner with physical security, FSO, and ISSM staff to support secure facility operations, media sanitization, DCSA audit readiness, and classified authorization packages.
• Provide technical guidance and mentorship to junior staff and IT team members, translating complex federal regulations into clear, actionable advice for non-cyber stakeholders.

Minimum Qualifications

• Active DoD Secret clearance required (Top Secret or TS/SCI eligibility highly preferred).
• 4+ years of dedicated cybersecurity engineering experience in DoD, cleared defense contractor, or high-rigor regulated environments.
• Current DoD 8570/8140 IAM/IAT Level II or III certification (e.g., Security+, CISSP, CISM, CASP+, or CySA+).
• Deep familiarity with government regulations, specifically NIST SP 800-171, CMMC Level 2, NIST SP 800-53, RMF, and JSIG requirements.
• Demonstrated experience executing STIG hardening, SCAP compliance scanning, vulnerability remediation, and EDR/SIEM administration across air-gapped or classified Windows/Linux environments.
• Proven track record of working constructively with engineering and business stakeholders-focusing on trust-building, communication, and enabling business outcomes rather than simple ticket-taking.

Pay and benefits

Colorado law requires us to tell you the base compensation range of this role, which is $128,000 - $160,000, determined by your education, experience, knowledge, skills, and abilities. What we can't quantify for you are the exciting challenges, supportive team, and amazing culture we enjoy.

Classification: Full-time Exempt

Benefits

(Please note, Interns are not eligible for benefits):

• Unlimited PTO - Vacation, Sick, Personal, and Bereavement
• Paid Parental and Adoptive Leave
• Medical, Dental and Vision Insurance
• Tax Advantage Accounts (HSA/FSA)
• Employer Paid Short and Long Term Disability, Basic Life, AD&D
• Additional Benefit Options Including Voluntary Life and Emergency Medical Transport
• EAP Program
• Retirement Savings Plan - 401k with Company Match

How To Apply

Interested candidates are encouraged to apply by filling out the application below and clicking "Submit Application". This position will be posted for a minimum of 3 days and will remain open until filled or adjusted based on the volume of applicants.

Note

• Research suggests that women and BIPOC individuals may self-select out of opportunities if they don't meet 100% of the job requirements. We encourage anyone who believes they have the skills and the drive necessary to succeed here to apply for this role.
• Must be a U.S. Person (this includes U.S. Citizens and Permanent Residents).
• Eligibility to obtain and maintain a U.S. Security Clearance.
• No outside recruiters, please.