Senior Cybersecurity Engineer

The future of aerospace and defense starts here.

Ursa Major was founded to revolutionize how America and its allies access and apply high-performance propulsion, from hypersonics to solid rocket motors, satellite maneuvering and launch. We design and deliver propulsion and defense systems that solve the most urgent and critical national security demands.

We are bringing a new model to space access: one in which every link in an enormous value chain isn’t limited by those around it. We design rocket engines and propulsion solutions.

Our products and technologies require an extraordinary team—one that will ensure the security of tomorrow’s technologies while deploying today’s best. We are an intrinsically motivated team with a passion for solving problems and empowering each other every day.

As a Senior Cybersecurity Engineer (Level 3) within our Digital Operations team, you won’t just be monitoring alerts or checking compliance boxes. You will be a hands-on problem solver and trusted advisor who helps our hardware, software, and manufacturing engineers navigate complex security environments—including Controlled Unclassified Information (CUI)—without slowing down the pace of innovation.

Reporting up through Digital Operations, you will sit at the intersection of DevOps, Digital Manufacturing, Software Engineering, Zero-Trust Networking, and IT. As Ursa Major scales from 380 to 500+ employees by EOY 2026, you will play a central role in evolving our CMMC Level 2 posture—leading the strategic transition from a cloud-only enclave to a high-performing hybrid enclave that integrates on-premise hardware, lab equipment, and manufacturing environments smoothly and securely.

• Stakeholder Enablement & Creative Risk Mitigation

• Partner directly with non-cyber employees (program managers, manufacturing engineers, test stand operators) to understand their workflows and help them safely manage CUI and new tools without fear or unnecessary friction.

• Approach security challenges with nuance rather than black-and-white rules. Find pragmatically secure pathways that satisfy federal requirements while keeping physical hardware engineering and CAD/CAM development moving forward.

• Design controls around engineering workflows to eliminate latency and operational bottlenecks, ensuring compliance feels like an accelerator rather than a roadblock.

• Hybrid CMMC L2 Expansion & Security Engineering

• Lead the technical implementation to strategically expand our CMMC Level 2 boundary beyond our cloud-only enclave—safely integrating on-premise infrastructure, physical testing equipment, and shop floor operations without expanding CMMC scope to the entire enterprise network.

• Manage and optimize technical security controls (SIEM, firewalls, zero-trust network access, identity platforms, vulnerability management) across both cloud and physical network environments.

• Evolve key compliance artifacts—including System Security Plans (SSPs), Risk Assessment Reports (RARs), and POA&Ms—ensuring physical site boundaries and hybrid hardware data flows are accurately documented.

• Leadership & Technical Ownership (Level 3)

• Act as a subject matter expert who tackles ambiguous, high-complexity security and network segmentation challenges with minimal supervision, taking full ownership from diagnosis to resolution.

• Work side-by-side with Zero-Trust Networking, DevOps, and IT to embed micro-segmentation and physical device controls directly into manufacturing environments and automated pipelines.

• Provide technical guidance and