T

True Anomaly

Builds spacecraft and software for space defense

Mission Security Engineer 3

Security Engineering & ArchitectureConfirmed live in the last 24 hours
Full-time

About the Job

Requirements

  • Three to five years of combined experience in a technical IT field, security engineering, DevSecOps, and/or software development.
  • Active Top Secret clearance with SCI eligibility is required.
  • DoD 8140 IAT Level II certification, such as Security+, CySA+, or equivalent, is required.
  • Experience implementing or utilizing NSA Type 1 cryptographic solutions in operational systems.
  • Experience with Risk Management Framework processes and achieving Authority to Operate approvals for complex systems.
  • Working knowledge of NIST SP 800-53 security controls and their mapping to technical implementation.
  • Hands-on experience implementing Security Technical Implementation Guides at the operating system, container, platform, and application levels.
  • Familiarity with space system architectures, including satellite operations, ground segments, and telemetry, tracking, and command systems.
  • A bachelor's degree in Computer Science, Cybersecurity, or Engineering, or equivalent experience.
  • Must be a U.S. citizen, lawful permanent resident, protected individual under 8 U.S.C. 1324b(a)(3), or eligible to obtain required authorizations from the U.S. Department of State.

Responsibilities

  • Implement end-to-end security controls for ground-based Command and Control systems, spacecraft hardware and software platforms, firmware, embedded systems, cloud-native applications, and operational technology.
  • Ensure security architectures enable effective monitoring, logging, and incident response without compromising operational tempo.
  • Implement security controls and zero trust architecture throughout the product development lifecycle to minimize Risk Management Framework findings through upfront engineering.
  • Implement and validate Defense Information Systems Agency Security Technical Implementation Guide requirements at the operating system, container, platform, and application layers within products as they are developed.
  • Integrate Risk Management Framework controls into continuous integration and continuous delivery pipelines through DevSecOps practices, including Infrastructure as Code, automated security scanning, and continuous monitoring tools.
  • Identify and remediate findings from Security Technical Implementation Guides, vulnerability scans, penetration testing, and software composition analysis to maintain Authority to Operate posture.
  • Support all Risk Management Framework Steps 1–6, with emphasis on control implementation, assessment preparation, and remediation for Department of Defense and Intelligence Community programs.
  • Ensure compliance with NIST 800-53, CNSSI 1253, ICD 503, JSIG, and other applicable frameworks for National Security Systems handling classified information up to Top Secret/Sensitive Compartmented Information.
  • Support cloud Provisional Authorization and inherited control models across classified cloud environments, such as Impact Level 6 Cloud Service Providers.
  • Contribute technically to security artifacts, including System Security Plans, Security Assessment Plans, Security Assessment Reports, and Plans of Action and Milestones.
  • Serve as a technical voice with government Information System Security Officers, Information System Security Engineers, and third-party assessors during Authority to Operate and reauthorization activities.
  • Coordinate across distributed teams, including spacecraft engineers, ground operations, and government partners.
  • Participate in an on-call rotation for security incident response and mission-critical system support as required.
  • Travel occasionally to government sites, launch facilities, or partner locations as required.

Desired Qualifications

  • Direct experience securing Command and Control systems, space systems, or other Department of Defense mission systems.
  • Experience supporting Department of Defense or Intelligence Community customers through Authority to Operate, re-Authority to Operate, or continuous authorization.
  • Direct experience within Impact Level 5 or Impact Level 6 cloud environments.
  • Knowledge of cloud security control inheritance and shared responsibility models within Department of Defense Impact Level 5 or Impact Level 6 environments.
  • Familiarity with Cross Domain Solutions, data guards, or other information flow control technologies.
  • Experience with FedRAMP High, Cybersecurity Maturity Model Certification, or Department of Defense Impact Level 5/6 authorizations.
  • Experience integrating security tooling, such as security information and event management systems, vulnerability scanners, and audit/logging systems, into development workflows.
  • Understanding of zero trust architectures and modern identity solutions applied to classified environments.

About the Company

True Anomaly

Builds spacecraft and software for space defense

True Anomaly builds spacecraft and mission software for US and allied defense organizations operating in space. Its Jackal autonomous orbital vehicle carries sensors that detect, track and image other spacecraft, then maneuvers to perform rendezvous and proximity operations. Operators use Mosaic to plan missions, simulate maneuvers, send commands and review data from satellites and ground systems while retaining control over autonomous actions. The company develops and manufactures its hardware in the United States and supplies spacecraft, payloads and software through defense programs and contracts. True Anomaly was founded in 2022 and is headquartered in Centennial, Colorado.

Company size
201-500
Company stage
Debt Financing
Total funding
$1B
Headquarters
Centennial, CO
Founded
2022

Recently Posted Jobs

Explore more opportunities at True Anomaly

See more jobs