Information Systems Security Manager

As an end-to-end responsive space company, Firefly Aerospace is on a mission to enable our world to launch, land, and operate in space – anywhere, anytime. Our small- to medium-lift launch vehicles, lunar landers, and orbital vehicles allow us to service the entire lifecycle of government and commercial missions from low Earth orbit to the Moon and beyond. We utilize carbon composite structures, patented propulsion technologies, and common components across our vehicles to iterate quickly, improve reliability, and deliver payloads at a lower cost.

As the Information System Security Manager at Firefly Aerospace, you will play a critical role in ensuring all mission-critical systems and enterprise networks maintain rigorous compliance with national security and corporate mandates. This role operates at the critical intersection of cybersecurity policy and system engineering, focusing heavily on translating CNSSP-12 requirements into actionable engineering architectures. You will lead the information assurance strategy, manage the Risk Management Framework (RMF) life cycle per NIST SP 800-37 Rev.

2, and drive continuous compliance for corporate standards including CMMC and NIST SP 800-171. This position offers the opportunity to architect security compliance for advanced space systems and corporate infrastructure. You will report directly to Director of Cybersecurity and collaborate closely with security leaderships, systems engineers, and operations teams to embed security into the development life cycle and ensure our systems achieve and maintain full authorization.

Space Systems Engineering: CNSSP-12 Compliance

• Translate complex CNSSP 12 (National Information Assurance Policy for Space Systems) mandates into measurable system engineering requirements and architectural constraints.
• Coordinate directly with system owners, space vehicle engineers, and Dev Ops teams to embed security controls into the system development life cycle (SDLC).
• Lead the design and oversee the implementation of secure network architectures for ground and space segments.
• Conduct security impact assessments, threat modeling, and risk assessments on proposed space vehicle architectures and system changes.
• Manage the full system life cycle accreditation processes under NIST SP 800-37 Rev. 2, driving systems through the RMF to secure Authorities to Operate (ATO).
• Develop and maintain critical accreditation documentation, including System Security Plans (SSPs), POAMs, and Security Assessment Reports (SARs).
• Provide regular status reports, continuous monitoring metrics, and compliance briefings to senior management and government Authorizing Officials (AOs).
• Ensure system configurations continuously comply with DISA STIGs and DoD Security Technical Implementation Guides.

Corporate Compliance;
Security Operations

• Lead and manage the corporate-wide cybersecurity compliance initiatives, ensuring strict adherence to NIST SP 800-171, NIST SP 800-53 and Space Policy Directive 5 (SPD –
  5) across enterprise.
• Manage a diverse, multi-location Information Assurance team, setting goals, driving accountability, and mentoring security personnel.
• Support incident response activities, ensure timely reporting to government stakeholders (e.g., DCSA), and lead tabletop exercises to evaluate and improve cross‑functional readiness.
• Oversee red‑teaming and penetration testing activities to uncover vulnerabilities and ensure network resilience.

Required:

• BS or MS degree in Computer Science, Cybersecurity, Information Technology, or a related technical discipline. Equivalent experience may be considered.
• Proven ability to translate high‑level policies (such as CNSSP-12) into technical engineering requirements.
• At least 10 years of experience in information assurance, cybersecurity compliance, or risk management within the aerospace, federal, or DoD contracting environment.
• Demonstrated expertise in applying NIST SP 800-37 Rev. 2 (RMF), Space Policy Directive 5 (SPD –
  5), NIST SP 800-171, NIST SP 800-53, and FISMA standards.
• Hands‑on experience with DoD security tools (e.g., eMASS, ACAS, HBSS, SPRS).
• Exceptional leadership and…