Senior Cybersecurity Engineer

Ursa Major is revolutionizing aerospace and defense propulsion, designing and delivering systems that address critical national security demands. We're building a new model for space access, where our rocket engines and propulsion solutions empower an extraordinary team to secure tomorrow’s technologies while deploying today’s best.

About the role

As a Senior Cybersecurity Engineer (Level 3) on our Digital Operations team, you’ll be a hands-on problem solver and trusted advisor. You’ll collaborate with hardware, software, and manufacturing engineers to navigate complex security environments—including Controlled Unclassified Information (CUI)—without slowing innovation. Reporting through Digital Operations, you’ll work at the intersection of DevOps, Digital Manufacturing, Software Engineering, Zero-Trust Networking, and IT. As Ursa Major scales from 380 to 500+ employees by the end of 2026, you’ll play a central role in evolving our CMMC Level 2 posture, leading the transition from a cloud-only enclave to a high-performing hybrid enclave that securely integrates on-premise hardware, lab equipment, and manufacturing environments.

Responsibilities

• Stakeholder Enablement & Creative Risk Mitigation
  • Partner directly with non-cyber employees (program managers, manufacturing engineers, test stand operators) to understand their workflows and help them safely manage CUI and new tools without unnecessary friction.
  • Approach security challenges with nuance, finding pragmatically secure pathways that satisfy federal requirements while keeping hardware engineering and CAD/CAM development moving forward.
  • Design controls around engineering workflows to eliminate latency and operational bottlenecks, ensuring compliance feels like an accelerator rather than a roadblock.
• Hybrid CMMC L2 Expansion & Security Engineering
  • Lead the technical implementation to expand our CMMC Level 2 boundary beyond our cloud-only enclave, safely integrating on-premise infrastructure, physical testing equipment, and shop floor operations without expanding CMMC scope to the entire enterprise network.
  • Manage and optimize technical security controls (SIEM, firewalls, zero-trust network access, identity platforms, vulnerability management) across both cloud and physical network environments.
  • Evolve key compliance artifacts—including System Security Plans (SSPs), Risk Assessment Reports (RARs), and POA&Ms—ensuring physical site boundaries and hybrid hardware data flows are accurately documented.
• Leadership & Technical Ownership (Level 3)
  • Act as a subject matter expert tackling ambiguous, high-complexity security and network segmentation challenges with minimal supervision, taking full ownership from diagnosis to resolution.
  • Work side-by-side with Zero-Trust Networking, DevOps, and IT to embed micro-segmentation and physical device controls directly into manufacturing environments and automated pipelines.
  • Provide technical guidance and mentorship to junior staff and IT team members, translating complex federal regulations into clear, actionable advice for non-cyber stakeholders.

Requirements

• 4+ years of dedicated cybersecurity engineering experience in regulated or high-rigor environments.
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or equivalent practical experience.
• Deep familiarity with government contracting regulations, specifically NIST SP 800-171 and CMMC Level 2 framework requirements.
• Demonstrated experience implementing security controls in hybrid IT/OT or cloud-and-physical hardware environments (e.g., site-to-site VPNs, micro-segmentation, local device controls).
• Proven track record of working constructively with engineering and business stakeholders—focusing on trust-building, communication, and enabling business outcomes rather than simple ticket-taking.

Preferred Qualifications

• Master’s degree in a technical field; active CISSP, CISM, CISA, or CRISC certifications.
• Direct experience participating in or maintaining a C3PAO CMMC assessment environment.
• Ability to obtain and maintain a U.S. Government Security Clearance.

Pay

Colorado law requires us to share the base compensation range for this role: $130,000 - $162,000, determined by your education, experience, knowledge, skills, and abilities.

Benefits

• Unlimited PTO (Vacation, Sick, Personal, and Bereavement)
• Paid Parental and Adoptive Leave
• Medical, Dental, and Vision Insurance
• Tax Advantage Accounts (HSA/FSA)
• Employer-Paid Short- and Long-Term Disability, Basic Life, AD&D
• Additional Benefit Options (Voluntary Life, Emergency Medical Transport)
• EAP Program
• Retirement Savings Plan (401k with Company Match)
• Equity Grants in the Company

Must be a U.S. Person (U.S. Citizen or Permanent Resident) with eligibility to obtain and maintain a U.S. Security Clearance.