Job description

Space is a warfighting domain. True Anomaly seeks those with the talent and ambition to build the technology that secures it. OUR MISSION True Anomaly delivers decisive capabilities for space superiority. We build autonomous spacecraft, advanced payloads, mission software, and space-based interceptors — enabling the U.S. and its Allies to secure the space environment and counter threats from the ultimate high ground. OUR VALUES Be the offset. We create asymmetric advantages with creativity and ingenuity. What would it take? We challenge assumptions to deliver ambitious results. It’s the people. Our team is our competitive advantage and we are better together. BENEFITS & PERKS * Best-in-class healthcare: 100% company-paid medical, dental, and vision coverage for you and your dependents, with HSA/HRA options Generous time off: Flexible Time Off (FTO) for exempt employees, accrued PTO of up to 25 days for non-exempt employees, plus 12 paid holidays; Parental Leave; Sick Leave Fuel for your day: Daily catered lunch and unlimited snacks for in-office employees And more: 401(k) retirement plan, fitness reimbursement, and Dog Fridays Equity participation: Equity is included as part of our total compensation package, giving you an opportunity to share in the company’s success. *Do not apply to fixed term and temporary roles YOUR MISSION As a Mission Security Engineer III, you will be a critical technical expert securing national security space systems, classified ground-based Command and Control (C2) infrastructure, and space vehicle hardware and software. This is a hands-on role that blends deep technical Information Technology (IT) expertise with cybersecurity and compliance acumen. We are looking for candidates with deep expertise in at least one of the following disciplines: Cybersecurity compliance (NIST 800-53 controls implementation and validation) DevSecOps Software Development Operating systems & hosting (Windows / Linux) Cloud infrastructure deployment (AWS/Azure) Containerization infrastructure, Kubernetes, EKS, AKS Boundary protection Endpoint Detection and Response / Extended Detection and Response (EDR/XDR) Security Information and Event Management / Security Operations Center (SIEM/SOC) deployment You will work as part of a highly capable, cross-functional team to design, deploy, measure, and document classified systems from the ground up — navigating dynamic, cross-program priorities that change daily. You will be responsible for ensuring our systems meet the most rigorous federal security standards while accelerating delivery of critical warfighting capabilities to Department of War and Intelligence Community customers. This is an ideal role for a security-focused technologist with deep IT or cybersecurity technical skills who is eager to take novel, innovative approaches to cybersecurity and compliance. If you're energized by the challenges of securing mission-critical systems that protect lives and national interests, join our team. Responsibilities Implement end-to-end security controls for ground-based C2 systems, spacecraft hardware and software platforms, spanning firmware, embedded systems, cloud-native applications, and operational technology Ensure security architectures enable effective monitoring, logging, and incident response without compromising operational tempo Implement security controls and zero trust architecture throughout the product development lifecycle, minimizing RMF findings through strong upfront engineering Implement and validate DISA STIG requirements at the OS, container, platform, and application layers within products as they are developed Integrate RMF controls into CI/CD pipelines through DevSecOps practices including Infrastructure as Code (IaC), automated security scanning, and continuous monitoring tooling Identify and remediate findings from STIGs, vulnerability scans, penetration testing, and SCA activities to maintain ATO posture Support all RMF Steps 1–6, with emphasis on control implementation, assessment preparation, and remediation for DoD and IC programs Ensure compliance with NIST 800-53, CNSSI 1253, ICD 503, JSIG, and other applicable frameworks for National Security Systems (NSS) handling classified information up to TS/SCI Support cloud Provisional Authorization (PA) and inherited control models across classified cloud environments (e.g., Impact Level (IL)-6 Cloud Service Providers (CSPs)) Contribute technically to security artifacts including SSPs, SAPs, SARs, and POA&Ms Serve as a credible technical voice with government ISSOs, ISSEs, and third-party assessors during ATO and reauthorization activities Required Qualifications 3–5 years of combined experience in a technical IT field, security engineering, DevSecOps, and/or software development Active Top Secret clearance with SCI eligibility required DoD 8140 IAT Level II certification (Security+, CySA+, or equivalent) required Experience implementing or utilizing NSA Type 1 cryptographic solutions in operational systems Experience with RMF processes and achieving ATOs for complex systems Working knowledge of NIST SP 800-53 security controls and how they map to technical implementation Hands-on experience implementing STIGs at the OS, container, platform, and application level Familiarity with space system architectures including satellite operations, ground segments, and TT&C systems Bachelor's degree in Computer Science, Cybersecurity, Engineering, or related field (or equivalent experience) Preferred Qualifications Active TS/SCI clearance with polygraph Direct experience securing C2 systems, space systems, or other DoD mission systems Experience supporting DoD or IC customers through ATO, re-ATO, or continuous authorization Direct experience within IL-5 or IL-6 impact level cloud environments Knowledge of cloud security control inheritance and shared responsibility models within DoD IL-5 or IL-6 environments Familiarity with Cross Domain Solutions (CDS), data guards, or other information flow control technologies Experience with FedRAMP High, CMMC, or DoD IL-5/IL-6 authorizations Experience integrating security tooling (e.g., SIEMs, vulnerability scanners, audit/logging systems) into development workflows Understanding of zero trust architectures and modern identity solutions applied to classified environments Work Environment This role will be onsite in Denver, CO (preferred) or Long Beach, CA #LI-Onsite Fast-paced, mission-critical environment supporting national security space operations Requires coordination across distributed teams including spacecraft engineers, ground operations, and government partners May require participation in on-call rotation for security incident response and mission-critical system support High degree of autonomy and ownership as a trusted, cleared team member Occasional travel to government sites, launch facilities, or partner locations may be required What We Offer Competitive salary commensurate with experience and clearance level Opportunity to drive security posture for cutting-edge space systems with national security impact Professional development support including conferences, training, and security certifications Collaborative culture working alongside spacecraft engineers, mission operators, and experienced security professionals Equity + Benefits including Health, Dental, Vision, HRA/HSA options, PTO and paid holidays, 401K, Parental Leave Compensation Colorado Base Salary: $120,000–$170,000 California Base Salary: $125,000–$180,000 for Long Beach Equity + Benefits including Health, Dental, Vision, HRA/HSA options, PTO and paid holidays, 401K, Parental Leave Your actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, location, and experience. To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR), you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State. To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR) you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State. True Anomaly is committed to equal employment opportunity on any basis protected by applicable state and federal laws. If you have a disability or additional need that requires accommodation, please do not hesitate to let us know. To protect candidates and our company from application fraud and impersonation, we use third-party tools to verify applicant identity and detect fraudulent applications. Learn more in our Privacy Notice .

Requirements

Must-haves

Space is a warfighting domain. True Anomaly seeks those with the talent and ambition to build the technology that secures it.
Implement end-to-end security controls for ground-based C2 systems, spacecraft hardware and software platforms, spanning firmware, embedded systems, cloud-native applications, and operational technology
Ensure security architectures enable effective monitoring, logging, and incident response without compromising operational tempo
Implement security controls and zero trust architecture throughout the product development lifecycle, minimizing RMF findings through strong upfront engineering
Implement and validate DISA STIG requirements at the OS, container, platform, and application layers within products as they are developed
Integrate RMF controls into CI/CD pipelines through DevSecOps practices including Infrastructure as Code (IaC), automated security scanning, and continuous monitoring tooling
Identify and remediate findings from STIGs, vulnerability scans, penetration testing, and SCA activities to maintain ATO posture
Support all RMF Steps 1–6, with emphasis on control implementation, assessment preparation, and remediation for DoD and IC programs
Ensure compliance with NIST 800-53, CNSSI 1253, ICD 503, JSIG, and other applicable frameworks for National Security Systems (NSS) handling classified information up to TS/SCI
Support cloud Provisional Authorization (PA) and inherited control models across classified cloud environments (e.g., Impact Level (IL)-6 Cloud Service Providers (CSPs))
Contribute technically to security artifacts including SSPs, SAPs, SARs, and POA&Ms
Serve as a credible technical voice with government ISSOs, ISSEs, and third-party assessors during ATO and reauthorization activities

Nice-to-haves

Active TS/SCI clearance with polygraph
Direct experience securing C2 systems, space systems, or other DoD mission systems
Experience supporting DoD or IC customers through ATO, re-ATO, or continuous authorization
Direct experience within IL-5 or IL-6 impact level cloud environments
Knowledge of cloud security control inheritance and shared responsibility models within DoD IL-5 or IL-6 environments
Familiarity with Cross Domain Solutions (CDS), data guards, or other information flow control technologies
Experience with FedRAMP High, CMMC, or DoD IL-5/IL-6 authorizations
Experience integrating security tooling (e.g., SIEMs, vulnerability scanners, audit/logging systems) into development workflows
Understanding of zero trust architectures and modern identity solutions applied to classified environments
Work Environment
This role will be onsite in Denver, CO (preferred) or Long Beach, CA #LI-Onsite
Fast-paced, mission-critical environment supporting national security space operations

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

awsazurekubernetesci/cd

Platform: greenhouse
Effort: quick

Benefits

Benefits detected in the listing.

Dental

Vision

401k

401(K)

Pto

Parental Leave

Professional Development