Asks for

The ad says“DoD 8140 IAT Level II certification (Security+, CySA+, or equivalent) required”
The ad says“DoD 8140 IAT Level II certification (Security+, CySA+, or equivalent) required”
The ad says“Active Top Secret clearance with SCI eligibility required”
The ad says“DoD 8140 IAT Level II certification (Security+, CySA+, or equivalent) required”
The ad says“Active Top Secret clearance with SCI eligibility required”
The ad says“Containerization infrastructure, Kubernetes, EKS, AKS”
The ad says“Cloud infrastructure deployment (AWS/Azure)”
The ad says“Cloud infrastructure deployment (AWS/Azure)”
The ad says“Integrate RMF controls into CI/CD pipelines through DevSecOps practices including Infrastructure as Code (IaC), automated security scanning, and continuous monitoring tooling”
The ad says“Cybersecurity compliance (NIST 800-53 controls implementation and validation)”
The ad says“DevSecOps”
The ad says“Endpoint Detection and Response / Extended Detection and Response (EDR/XDR)”
The ad says“Containerization infrastructure, Kubernetes, EKS, AKS”
The ad says“Integrate RMF controls into CI/CD pipelines through DevSecOps practices including Infrastructure as Code (IaC), automated security scanning, and continuous monitoring tooling”
The ad says“Containerization infrastructure, Kubernetes, EKS, AKS”
The ad says“Operating systems & hosting (Windows / Linux)”
The ad says“Cybersecurity compliance (NIST 800-53 controls implementation and validation)”
The ad says“Working knowledge of NIST SP 800-53 security controls and how they map to technical implementation”
The ad says“Experience implementing or utilizing NSA Type 1 cryptographic solutions in operational systems”
The ad says“Implement security controls and zero trust architecture throughout the product development lifecycle, minimizing RMF findings through strong upfront engineering”
The ad says“Familiarity with space system architectures including satellite operations, ground segments, and TT&C systems”
The ad says“Security Information and Event Management / Security Operations Center (SIEM/SOC) deployment”
The ad says“Software Development”
The ad says“Implement and validate DISA STIG requirements at the OS, container, platform, and application layers within products as they are developed”
The ad says“Operating systems & hosting (Windows / Linux)”

Space is a warfighting domain. True Anomaly seeks those with the talent and ambition to build the technology that secures it.

OUR MISSION

True Anomaly delivers decisive capabilities for space superiority. We build autonomous spacecraft, advanced payloads, mission software, and space-based interceptors — enabling the U.S. and its Allies to secure the space environment and counter threats from the ultimate high ground.

OUR VALUES

Be the offset. We create asymmetric advantages with creativity and ingenuity.
What would it take? We challenge assumptions to deliver ambitious results.
It’s the people. Our team is our competitive advantage and we are better together.

BENEFITS & PERKS*

Best-in-class healthcare: 100% company-paid medical, dental, and vision coverage for you and your dependents, with HSA/HRA options
Generous time off: Flexible Time Off (FTO) for exempt employees, accrued PTO of up to 25 days for non-exempt employees, plus 12 paid holidays; Parental Leave; Sick Leave
Fuel for your day: Daily catered lunch and unlimited snacks for in-office employees
And more: 401(k) retirement plan, fitness reimbursement, and Dog Fridays
Equity participation: Equity is included as part of our total compensation package, giving you an opportunity to share in the company’s success.

*Do not apply to fixed term and temporary roles

YOUR MISSION

As a Mission Security Engineer III, you will be a critical technical expert securing national security space systems, classified ground-based Command and Control (C2) infrastructure, and space vehicle hardware and software.

This is a hands-on role that blends deep technical Information Technology (IT) expertise with cybersecurity and compliance acumen. We are looking for candidates with deep expertise in at least one of the following disciplines:

Cybersecurity compliance (NIST 800-53 controls implementation and validation)
DevSecOps
Software Development
Operating systems & hosting (Windows / Linux)
Cloud infrastructure deployment (AWS/Azure)
Containerization infrastructure, Kubernetes, EKS, AKS
Boundary protection
Endpoint Detection and Response / Extended Detection and Response (EDR/XDR)
Security Information and Event Management / Security Operations Center (SIEM/SOC) deployment

You will work as part of a highly capable, cross-functional team to design, deploy, measure, and document classified systems from the ground up — navigating dynamic, cross-program priorities that change daily. You will be responsible for ensuring our systems meet the most rigorous federal security standards while accelerating delivery of critical warfighting capabilities to Department of War and Intelligence Community customers.

This is an ideal role for a security-focused technologist with deep IT or cybersecurity technical skills who is eager to take novel, innovative approaches to cybersecurity and compliance. If you're energized by the challenges of securing mission-critical systems that protect lives and national interests, join our team.

Responsibilities

Implement end-to-end security controls for ground-based C2 systems, spacecraft hardware and software platforms, spanning firmware, embedded systems, cloud-native applications, and operational technology
Ensure security architectures enable effective monitoring, logging, and incident response without compromising operational tempo
Implement security controls and zero trust architecture throughout the product development lifecycle, minimizing RMF findings through strong upfront engineering
Implement and validate DISA STIG requirements at the OS, container, platform, and application layers within products as they are developed
Integrate RMF controls into CI/CD pipelines through DevSecOps practices including Infrastructure as Code (IaC), automated security scanning, and continuous monitoring tooling
Identify and remediate findings from STIGs, vulnerability scans, penetration testing, and SCA activities to maintain ATO posture
Support all RMF Steps 1–6, with emphasis on control implementation, assessment preparation, and remediation for DoD and IC programs
Ensure compliance with NIST 800-53, CNSSI 1253, ICD 503, JSIG, and other applicable frameworks for National Security Systems (NSS) handling classified information up to TS/SCI
Support cloud Provisional Authorization (PA) and inherited control models across classified cloud environments (e.g., Impact Level (IL)-6 Cloud Service Providers (CSPs))
Contribute technically to security artifacts including SSPs, SAPs, SARs, and POA&Ms
Serve as a credible technical voice with government ISSOs, ISSEs, and third-party assessors during ATO and reauthorization activities

Required Qualifications

3–5 years of combined experience in a technical IT field, security engineering, DevSecOps, and/or software development
Active Top Secret clearance with SCI eligibility required
DoD 8140 IAT Level II certification (Security+, CySA+, or equivalent) required
Experience implementing or utilizing NSA Type 1 cryptographic solutions in operational systems
Experience with RMF processes and achieving ATOs for complex systems
Working knowledge of NIST SP 800-53 security controls and how they map to technical implementation
Hands-on experience implementing STIGs at the OS, container, platform, and application level
Familiarity with space system architectures including satellite operations, ground segments, and TT&C systems
Bachelor's degree in Computer Science, Cybersecurity, Engineering, or related field (or equivalent experience)

Preferred Qualifications

Active TS/SCI clearance with polygraph
Direct experience securing C2 systems, space systems, or other DoD mission systems
Experience supporting DoD or IC customers through ATO, re-ATO, or continuous authorization
Direct experience within IL-5 or IL-6 impact level cloud environments
Knowledge of cloud security control inheritance and shared responsibility models within DoD IL-5 or IL-6 environments
Familiarity with Cross Domain Solutions (CDS), data guards, or other information flow control technologies
Experience with FedRAMP High, CMMC, or DoD IL-5/IL-6 authorizations
Experience integrating security tooling (e.g., SIEMs, vulnerability scanners, audit/logging systems) into development workflows
Understanding of zero trust architectures and modern identity solutions applied to classified environments

Work Environment

This role will be onsite in Denver, CO (preferred) or Long Beach, CA #LI-Onsite
Fast-paced, mission-critical environment supporting national security space operations
Requires coordination across distributed teams including spacecraft engineers, ground operations, and government partners
May require participation in on-call rotation for security incident response and mission-critical system support
High degree of autonomy and ownership as a trusted, cleared team member
Occasional travel to government sites, launch facilities, or partner locations may be required

What We Offer

Competitive salary commensurate with experience and clearance level
Opportunity to drive security posture for cutting-edge space systems with national security impact
Professional development support including conferences, training, and security certifications
Collaborative culture working alongside spacecraft engineers, mission operators, and experienced security professionals
Equity + Benefits including Health, Dental, Vision, HRA/HSA options, PTO and paid holidays, 401K, Parental Leave

Compensation

Colorado Base Salary: $120,000–$170,000
California Base Salary: $125,000–$180,000 for Long Beach
Equity + Benefits including Health, Dental, Vision, HRA/HSA options, PTO and paid holidays, 401K, Parental Leave
Your actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, location, and experience.

To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR), you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State.

To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR) you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State.

True Anomaly is committed to equal employment opportunity on any basis protected by applicable state and federal laws. If you have a disability or additional need that requires accommodation, please do not hesitate to let us know.

To protect candidates and our company from application fraud and impersonation, we use third-party tools to verify applicant identity and detect fraudulent applications. Learn more in our Privacy Notice.