Senior Cybersecurity Engineer

Ursa Major is seeking a Senior Cybersecurity Engineer to support its Digital Operations team, bridging day-to-day commercial enterprise activities with cleared defense program execution. This Level 3 role includes hands-on security engineering and leadership across classified spaces, secure labs, and air-gapped networks, with direct involvement in RMF and JSIG lifecycle work, plus CMMC Level 2 posture.

Role focus

In this position, you will work across engineering and security boundaries to manage CUI and classified data flows safely, while maintaining momentum for hardware engineering, CAD/CAM development, and classified testing. You will also take point on complex security segmentation challenges, leading diagnosis and resolution with minimal supervision.

Responsibilities

• Partner with non-cyber stakeholders, including program managers, propulsion engineers, test stand operators, and cleared defense leads, to understand workflows and safely manage CUI and classified data flows.
• Apply practical security approaches that align with federal expectations including RMF, NIST SP 800-53, and NIST SP 800-171 while avoiding unnecessary operational friction.
• Design controls that fit engineering workflows to reduce latency and eliminate operational bottlenecks.
• Lead hands-on security engineering, vulnerability management, and continuous monitoring across classified program enclaves, air-gapped networks, and secure testing environments.
• Execute RMF and JSIG lifecycle tasks, including system hardening using STIGs/SCAP, vulnerability scanning (ACAS/Tenable), eMASS package management, System Security Plan (SSP) authoring, and POA&M remediation.
• Manage and optimize technical security controls across both enterprise and classified network environments, including EDR, SIEM log aggregation, firewalls, and identity platforms.
• Serve as a subject matter expert for ambiguous, high-complexity security segmentation issues with end-to-end ownership.
• Collaborate with physical security, FSO, and ISSM staff to support secure facility operations, media sanitization, DCSA audit readiness, and classified authorization packages.
• Provide technical guidance and mentorship to junior staff and IT team members by translating federal requirements into clear, actionable guidance for non-cyber stakeholders.

Requirements

• Active DoD Secret clearance required (Top Secret or TS/SCI eligibility highly preferred).
• 4+ years of dedicated cybersecurity engineering experience in DoD, cleared defense contractor, or high-rigor regulated environments.
• Current DoD 8570/8140 IAM/IAT Level II or III certification (examples include Security+, CISSP, CISM, CASP+, or CySA+).
• Deep familiarity with government regulations, specifically NIST SP 800-171, CMMC Level 2, NIST SP 800-53, RMF, and JSIG requirements.
• Demonstrated experience executing STIG hardening, SCAP compliance scanning, vulnerability remediation, and EDR/SIEM administration across air-gapped or classified Windows/Linux environments.
• Proven track record working constructively with engineering and business stakeholders, emphasizing trust-building, communication, and enabling business outcomes.

Technologies

• CUI
• NIST SP 800-53, NIST SP 800-171
• CMMC Level 2, RMF, JSIG
• STIGs, SCAP
• ACAS, Tenable, eMASS
• System Security Plan (SSP), POA&M
• EDR, SIEM log aggregation, firewalls, identity platforms
• Windows, Linux
• DoD 8570/8140, Security+, CISSP, CISM, CASP+, CySA+

Location and compensation

• Location: Berthoud, CO (onsite)
• Salary: USD 128,000 - 160,000 per year
• Minimum experience: 4 years

Benefits

• Unlimited PTO (Vacation, Sick, Personal, and Bereavement)
• Paid Parental and Adoptive Leave
• Medical, Dental and Vision Insurance
• Tax Advantage Accounts (HSA/FSA)
• Employer Paid Short and Long Term Disability, Basic Life, AD&D
• Additional Benefit Options Including Voluntary Life and Emergency Medical Transport
• EAP Program
• Retirement Savings Plan (401k with Company Match)

NOTE: Research suggests that women and BIPOC individuals may self-select out of opportunities if they do not meet 100% of the job requirements. Ursa Major encourages anyone who believes they have the skills and drive necessary to succeed in the role to apply.