Senior Cybersecurity Engineering role on Ursa Major’s Digital Operations team, supporting both commercial enterprise work and cleared defense program execution. This onsite position in Berthoud, CO focuses on hands-on security engineering and practical leadership across classified spaces, secure labs, and air-gapped networks, with responsibility spanning RMF/JSIG lifecycle activities and CMMC Level 2 posture.
Compensation: $128,000 - $160,000 per year. Clearance: Active DoD Secret required (Top Secret or TS/SCI eligibility preferred). Experience: 4+ years.
Responsibilities
- Work directly with non-cyber stakeholders (program managers, propulsion engineers, test stand operators, and cleared defense leads) to understand workflows and safely manage CUI and classified data flows with minimal friction.
- Apply security requirements with practical judgment, supporting federal compliance needs including RMF, NIST SP 800-53, and NIST SP 800-171 while helping keep engineering activities moving.
- Design security controls around real engineering workflows to reduce latency and operational bottlenecks, so compliance supports execution rather than slowing it down.
- Lead hands-on efforts in security engineering, vulnerability management, and continuous monitoring across classified enclaves, air-gapped networks, and secure testing environments.
- Execute RMF and JSIG lifecycle tasks, including system hardening using STIGs/SCAP, vulnerability scanning with ACAS/Tenable, eMASS package management, SSP authoring, and POA&M remediation.
- Manage and optimize technical security controls such as EDR, SIEM log aggregation, firewalls, and identity platforms across both enterprise and classified environments.
- Serve as a subject matter expert for complex security segmentation issues, owning work from diagnosis through resolution with minimal supervision.
- Partner with physical security, FSO, and ISSM staff to support secure facility operations, media sanitization, DCSA audit readiness, and classified authorization packages.
- Provide technical guidance and mentorship to junior staff and IT team members by translating federal regulations into clear, actionable direction for non-cyber stakeholders.
Requirements
- Active DoD Secret clearance required (Top Secret or TS/SCI eligibility highly preferred).
- 4+ years of dedicated cybersecurity engineering experience in DoD, cleared defense contractor environments, or similarly high-rigor regulated settings.
- Current DoD 8570/8140 IAM/IAT Level II or III certification (examples include Security+, CISSP, CISM, CASP+, or CySA+).
- Strong familiarity with government regulations including NIST SP 800-171, CMMC Level 2, NIST SP 800-53, RMF, and JSIG.
- Experience executing STIG hardening, SCAP compliance scanning, vulnerability remediation, and EDR/SIEM administration in air-gapped or classified Windows/Linux environments.
- Track record of constructive collaboration with engineering and business stakeholders, emphasizing communication, trust-building, and enabling outcomes.
Technologies
CUI, NIST SP 800-53, NIST SP 800-171, CMMC Level 2, RMF, JSIG, STIGs, SCAP, ACAS, Tenable, eMASS, System Security Plan (SSP), POA&M, EDR, SIEM log aggregation, firewalls, identity platforms, Windows, Linux, DoD 8570/8140, Security+, CISSP, CISM, CASP+, CySA+
Benefits
- Unlimited PTO (Vacation, Sick, Personal, and Bereavement)
- Paid Parental and Adoptive Leave
- Medical, Dental, and Vision Insurance
- Tax Advantage Accounts (HSA/FSA)
- Employer Paid Short and Long Term Disability, Basic Life, AD&D
- Additional benefit options including Voluntary Life and Emergency Medical Transport
- EAP program
- Retirement Savings Plan (401k with company match)
Note: Research suggests that women and BIPOC individuals may self-select out of opportunities if they do not meet 100% of the job requirements. Ursa Major encourages anyone who believes they have the skills and drive to succeed to apply.
