Senior Cybersecurity Engineer

Responsibilities

• Work directly with non-cyber stakeholders (program managers, propulsion engineers, test stand operators, and cleared defense leads) to understand workflows and safely manage CUI and classified data flows with minimal friction.
• Apply security requirements with practical judgment, supporting federal compliance needs including RMF, NIST SP 800-53, and NIST SP 800-171 while helping keep engineering activities moving.
• Design security controls around real engineering workflows to reduce latency and operational bottlenecks, so compliance supports execution rather than slowing it down.
• Lead hands-on efforts in security engineering, vulnerability management, and continuous monitoring across classified enclaves, air-gapped networks, and secure testing environments.
• Execute RMF and JSIG lifecycle tasks, including system hardening using STIGs/SCAP, vulnerability scanning with ACAS/Tenable, eMASS package management, SSP authoring, and POA&M remediation.
• Manage and optimize technical security controls such as EDR, SIEM log aggregation, firewalls, and identity platforms across both enterprise and classified environments.
• Serve as a subject matter expert for complex security segmentation issues, owning work from diagnosis through resolution with minimal supervision.
• Partner with physical security, FSO, and ISSM staff to support secure facility operations, media sanitization, DCSA audit readiness, and classified authorization packages.
• Provide technical guidance and mentorship to junior staff and IT team members by translating federal regulations into clear, actionable direction for non-cyber stakeholders.

Requirements

• Active DoD Secret clearance required (Top Secret or TS/SCI eligibility highly preferred).
• 4+ years of dedicated cybersecurity engineering experience in DoD, cleared defense contractor environments, or similarly high-rigor regulated settings.
• Current DoD 8570/8140 IAM/IAT Level II or III certification (examples include Security+, CISSP, CISM, CASP+, or CySA+).
• Strong familiarity with government regulations including NIST SP 800-171, CMMC Level 2, NIST SP 800-53, RMF, and JSIG.
• Experience executing STIG hardening, SCAP compliance scanning, vulnerability remediation, and EDR/SIEM administration in air-gapped or classified Windows/Linux environments.
• Track record of constructive collaboration with engineering and business stakeholders, emphasizing communication, trust-building, and enabling outcomes.

Technologies

CUI, NIST SP 800-53, NIST SP 800-171, CMMC Level 2, RMF, JSIG, STIGs, SCAP, ACAS, Tenable, eMASS, System Security Plan (SSP), POA&M, EDR, SIEM log aggregation, firewalls, identity platforms, Windows, Linux, DoD 8570/8140, Security+, CISSP, CISM, CASP+, CySA+

Benefits

• Unlimited PTO (Vacation, Sick, Personal, and Bereavement)
• Paid Parental and Adoptive Leave
• Medical, Dental, and Vision Insurance
• Tax Advantage Accounts (HSA/FSA)
• Employer Paid Short and Long Term Disability, Basic Life, AD&D
• Additional benefit options including Voluntary Life and Emergency Medical Transport
• EAP program
• Retirement Savings Plan (401k with company match)

Note: Research suggests that women and BIPOC individuals may self-select out of opportunities if they do not meet 100% of the job requirements. Ursa Major encourages anyone who believes they have the skills and drive to succeed to apply.