Mission Security Engineer at Apex Technology Inc · LumiJobs

Responsibilities

In this position, you will own the authorization posture of two systems: a space vehicle with a multi-decade operational life, and a classified cloud mission operations environment that changes daily and cannot miss a pass, hosting command and control, telemetry, mission planning, flight dynamics, and payload processing. You will contribute to cyber engineering and produce RMF authorization documentation, build and sustain authorization packages, own the plan of action and milestones day to day, and run continuous monitoring. This is mission systems work throughout, not traditional enterprise IT security.
We are open to candidates from ISSE, SSE, ISSM, or ISSO backgrounds, and are hiring across levels: from new and recent graduates through senior engineering, officer, and manager experience.
May include any or all of the following:
Authorization Ownership
Build and sustain authorization packages for both boundaries: system description, boundary definition, categorization, control selection and tailoring rationale, implementation statements, assessment coordination, and the residual risk picture carried to the AO.
Get assessors engaged early on our evidence-generation approach so generated artifacts are trusted before a package depends on them.
Maintain the authorization system of record (eMASS or equivalent).
Space Vehicle Segment
Own the authorization boundary determination for the flight segment and the rationale that survives assessor scrutiny.
Categorize under CNSSI 1253 and defend overlay selection, treating the Space Platform Overlay as the starting place it is rather than a finished answer — pushing back where our onboard security capability exceeds what the published tailoring assumes.
Tailor the control baseline with per-control rationale, using Aerospace's Space Segment Cybersecurity Profile (TOR-2023-02161 Rev A) and SPARTA-linked tailoring, including arguing controls back in where our onboard capability exceeds what those baselines assumed.
Define the type-authorization for the bus and design how each vehicle off the line generates its own conformance evidence so fleet growth does not mean linear growth in assessment labor.

Qualification

Experience with technical toolingEntry Level (1–3+ Years)Bachelor'sSkilled in PythonSenior Level (5–10+ Years)OSCALSPARTAQualified

Required

U.S. Citizenship (must possess the ability to access export-controlled data)
Active Top Secret clearance with SCI access and SAP eligibility strongly preferred
Experience with technical tooling: reading pipeline output, querying an API, interpreting scanner and configuration state
Entry Level (1–3+ Years)
Bachelor's, master's, or PhD in systems engineering, computer science, cybersecurity, aerospace, or a related field
Clear experience with hands-on building via coursework, internships, research code, personal projects, CTFs, a co-op, or an early role and/or some exposure to RMF, security compliance, cloud, or software engineering
Willingness to learn RMF from the ground up, with a demonstrated ability to pick up a complicated technical domain quickly and hold a lot of detail without losing the thread
Skilled in Python, Go, or equivalent, in CI/CD, infrastructure-as-code, and Git-based workflows
Senior Level (5–10+ Years)
Strong experience in embedded/space systems or cloud infrastructure
Multiple systems taken to authorization in national security or DoD environments, with fluency in RMF as practiced: categorization under CNSSI 1253, overlay selection, tailoring rationale, assessment coordination, POA&M management, continuous monitoring, and reauthorization triggers
Ability to speak concretely about categorization, tailoring, assessment, and authorization, and to design, document, or test a report and determine whether it constitutes evidence that a control is satisfied

Preferred

OSCAL, eMASS APIs, Xacta, controls-as-code, or continuous-controls-monitoring implementation experience
Experience with continuous authorization, ongoing authorization, or cATO
Experience building with AI-assisted development
Understanding of Mission Operations including satellite command and control, mission planning, flight dynamics, telemetry processing, or multi-mission ground segments
Embedded or safety-critical background in space, automotive, or industrial control
SPARTA, NIST IR 8270 or IR 8401, CCSDS security standards, Space Platform Overlay, NASA/Space Force system protection standards, or space-system threat modeling
Classified cloud accreditation at IL5/IL6 or IC equivalents, or accreditation under JSIG or ICD 703
Qualified, or able to qualify, under DoDM 8140.03 for a systems security engineering, security architecture, or Information Systems Security Manager work role. CISSP, CISSP-ISSEP, CISM, and SecurityX map well.

Mission Security Engineer

Responsibilities

Qualification

Required

Preferred

Benefits

Company

Apex Technology Inc

More roles at Apex Technology Inc