Senior IT Security Engineer - Mission System Cybersecurity & Compliance

Overview

Lunar Outpost, an industry leader in space robotics and planetary vehicles, invites you to join our team. We are dedicated to creating a permanent presence in space while driving positive impacts here on Earth.

We are currently seeking a Mission System Cybersecurity Engineer to contribute to our mission in a dynamic startup environment.

The Mission System Cybersecurity Engineer will play a key role in developing and deploying the Lunar Outpost Mission System. They will be responsible for ensuring the security, resilience, and compliance of mission and ground systems throughout their lifecycle. This role integrates cybersecurity principles into system design, development, and operations to protect mission data, assets, and critical infrastructure. They will lead initiatives to ensure compliance of the Lunar Outpost Mission System against the NIST 800-53 framework and assist in developing strategies for maintaining requirements and contract obligations, including the production of SSPs and POA&Ms.

The ideal candidate will have a thorough understanding of security architecture, risk management, US government contracting, controlled environments, and a readiness to work in a dynamic but pragmatic startup environment.

Take the #Next Leap with Lunar Outpost and work on the Pegasus LTV, which will carry NASA astronauts farther than they’ve ever been before on the lunar surface.

• Stand up and maintain security controls aligned to established frameworks and requirements, such as NIST 800-171, FARS/DFARS, NIST 800-53, and ITAR.
• Develop, decompose, and trace cybersecurity requirements into architecture, design, implementation, test, and verification activities of the mission system.
• Design, implement, monitor, and maintain security controls in mission systems, including configuration reviews, continuous monitoring, incident response, and role-based access controls.
• Lead or assist in internal and external security compliance audits; ensure audit readiness and timely remediation of findings.
• Manage security and compliance documentation including SSPs, POA&Ms, Security Control Traceability Matrices (SCTMs), and provide evidence of cybersecurity compliance/supporting authorization for operation.
• Lead or contribute to incident response, forensics, security monitoring, and remediation when cybersecurity incidents or vulnerabilities are discovered.
• Support training and awareness programs to foster a culture of security across the organization.
• Evaluate and implement tools for log monitoring (e.g., SIEM), DLP, and secure configurations.
• Plan for and implement resilience, survivability, maintainability, and up gradability of mission systems in the face of evolving cybersecurity threats.
• Partner with other compliance teams and the IT Manager to administer and track work within a GRC.

• Bachelor’s or Master’s degree in engineering, computer science, cybersecurity, information technology, or a related discipline, or equivalent experience.
• Bachelor’s Degree: 6+ years of direct experience in cybersecurity, governance, risk management, or compliance roles.
• Master’s Degree: 4+ years of direct experience in cybersecurity, governance, risk management, or compliance roles.
• Experience with security compliance audits and frameworks.
• Strong accountability for project decisions and actions.
• Experience with system engineering processes (requirements, architecture, design, V&V) applied to cyber-systems.
• Strong technical skills in cloud architecture, operating systems, networks, security controls, vulnerability scanning, and incident response.
• Familiarity with relevant cyber standards/frameworks (e.g., NIST, RMF, ISO) and mission assurance/survivability concepts.
• Ability to work cross-functionally with strong written and verbal communication, documentation skills, and the ability to influence engineering teams.
• Self-motivated, focused, and driven to meet critical deadlines; excellent organization and time management skills; excellent written and oral communication skills.
• U.S. Person status as required for this role.

• Familiarity with cloud security and compliance in AWS/AWS…