YOUR MISSION

As a Staff Security Architect, you will be the critical technical bridge securing True Anomaly's national security space systems with particular emphasis on ground-based command and control (C2) infrastructure, Space Based Interceptors software platforms, and cloud environments operating at DoD Impact Level 5/6 and SECRET/TS/SCI classification levels. 

This is a unique, hands-on role that blends deep security architecture expertise with active software development. You will design and implement security architectures spanning the full mission lifecycle including satellite operations, ground segments, C2 systems, and mission planning platforms while supporting the end-to-end journey to Authority to Operate (ATO) across IL-5, IL-6, and TS/SCI environments. You will be responsible for ensuring our systems meet the most rigorous federal security standards while maintaining operational effectiveness in contested environments. 

This is an ideal role for a security-focused technologist who can write code, architect secure systems, engage government assessors, and lead cross-functional teams through complex RMF processes. If you're energized by the challenges of securing mission-critical systems that protect lives and national interests, this role is for you. 

This position requires an active SECRET clearance at minimum; TS/SCI is strongly preferred. 

Responsibilities 

• Design and implement end-to-end security architectures for ground-based C2 systems, Space Based Interceptors defense software platforms, and on-orbit satellite constellations, spanning firmware, embedded systems, cloud-native applications, and operational technology 

• Architect and deploy NSA Type 1 cryptographic solutions for classified C2 communications and satellite command pathways, including protection of TT&C (telemetry, tracking, and command) systems 

• Develop comprehensive threat models specific to C2 and Space Based Interceptors defense systems, accounting for adversary capabilities across RF spectrum, cyber, and physical domains 

• Ensure security architectures enable effective monitoring, logging, and incident response without compromising operational tempo 

• Design, develop, and maintain secure, cloud-native SaaS applications and C2 platform components aligned with NIST SP 800-53 control requirements 

• Implement security controls natively in application code and architecture, not as afterthoughts but ensuring RMF findings are minimized through strong upfront engineering 

• Implement and validate DISA STIG requirements at the OS, container, platform, and application layers within Space Based Interceptors defense and C2 software stacks 

• Integrate RMF controls into CI/CD pipelines through DevSecOps practices including IaC, automated security scanning, and continuous monitoring tooling 

• Remediate findings from STIGs, vulnerability scans, penetration testing, and SCA activities to maintain ATO posture 

• Lead system architectures to achieve and sustain IL-5, IL-6, and TS/SCI ATOs in cloud and hybrid environments under the NIST Risk Management Framework 

• Support all RMF Steps 1–6, with emphasis on control implementation, assessment preparation, and remediation for DoD and IC programs 

• Ensure compliance with NIST 800-53, CNSSI 1253, ICD 503, JSIG, and other applicable frameworks for National Security Systems (NSS) handling classified information up to TS/SCI 

• Support cloud Provisional Authorization (PA) and inherited control models across classified cloud environments (e.g., IL-6 CSPs) 

• Contribute technically to security artifacts including SSPs, SAPs, SARs, and POA&Ms; serve as a credible technical voice with government ISSOs, ISSEs, and third-party assessors during ATO and reauthorization activities 

• Serve as the technical security bridge between spacecraft engineering, ground systems, software development, C2 operations, and government mission partners 

• Conduct security architecture reviews and provide authoritative guidance on secure design patterns as C2 and Space Based Interceptors defense capabilities evolve 

• Communicate complex security requirements, risk trade-offs, and compliance strategies to diverse stakeholders including engineering teams, executive leadership, and government customers 

Required Qualifications 

• 10+ years of combined experience in security architecture, security engineering, and/or software development with increasing responsibility 

• Active SECRET clearance required; TS/SCI strongly preferred 

• Demonstrated experience implementing NSA Type 1 cryptographic solutions in operational national security systems 

• Proven expertise with RMF processes and achieving ATOs for complex systems, with direct experience at IL-5 or IL-6 impact levels 

• Strong working knowledge of NIST SP 800-53 security controls and how they map to application and infrastructure design 

• Hands-on experience implementing STIGs (OS, container, platform, and application-level) 

• Proficiency in at least one modern programming language (e.g., Python, Go, Elixir, or similar) and demonstrated ability to contribute directly to secure software development 

• Experience architecting security for systems combining hardware, firmware, embedded systems, and cloud-native software 

• Deep knowledge of cryptographic protocols, key management, and secure communications architectures 

• Familiarity with space system architectures including satellite operations, ground segments, and TT&C systems 

• Excellent communication skills with ability to articulate security requirements to engineering teams, executive leadership, and government stakeholders 

• DoD 8570.01-M / DoD 8140 IAM Level II certification at minimum (e.g., CASP+ CE, CISM, CAP, or CISSP/Associate); IAM Level III certification (CISM or full CISSP) required for personnel performing ISSE functions on IL-6 or TS/SCI systems 

• Bachelor's degree in Computer Science, Cybersecurity, Engineering, or related field (or equivalent experience) 

Preferred Qualifications 

• Active TS/SCI clearance with polygraph 

• Direct experience securing C2 systems, Space Based Interceptors defense software platforms, or other DoD mission systems 

• Experience with CNSSI 1253, ICD 503, JSIG, or other Intelligence Community security standards 

• Experience supporting DoD or IC customers through ATO, re-ATO, or continuous authorization 

• Knowledge of cloud security control inheritance and shared responsibility models within IL-6 environments 

• Familiarity with Cross Domain Solutions (CDS), data guards, or other information flow control technologies 

• Experience with FedRAMP High, CMMC, or DoD IL-5/IL-6 authorizations 

• Knowledge of RF security, anti-jam techniques, and secure satellite communications 

• Experience integrating security tooling (e.g., SIEMs, vulnerability scanners, audit/logging systems) into development workflows 

• Understanding of zero trust architectures and modern identity solutions applied to classified environments 

• Understanding of supply chain risk management (SCRM) for national security systems 

• Relevant certifications such as CISSP-ISSAP, CCSP, CEH, or vendor-specific security certifications 

• Experience supporting red team or penetration testing activities against complex systems 

• Background in aerospace engineering, systems engineering, or a related technical discipline 

WORK ENVIRONMENT 

• Fast-paced, mission-critical environment supporting national security space operations 

• Requires coordination across distributed teams including spacecraft engineers, ground operations, and government partners 

• May require participation in on-call rotation for security incident response and mission-critical system support 

• High degree of autonomy and ownership as a founding security architecture leader 

• Direct access to executive leadership and opportunity to shape security strategy for emerging space capabilities 

• Occasional travel to government sites, launch facilities, or partner locations may be required 

WHAT WE OFFER 

• Competitive salary commensurate with experience and clearance level 

• Opportunity to architect security for cutting-edge space systems with national security impact 

• Professional development support including conferences, training, and security certifications 

• Collaborative culture working alongside spacecraft engineers, mission operators, and experienced security professionals 

• Equity + Benefits including Health, Dental, Vision, HRA/HSA options, PTO and paid holidays, 401K, Parental Leave 

To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR) you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State. 

COMPENSATION

• Base Salary:  Denver: $160,000 - $220,000, Long Beach: $165,000 - $230,000

• Equity + Benefits including Health, Dental, Vision, HRA/HSA options, PTO and paid holidays, 401K, Parental Leave 

Your actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, location, and experience. 

ADDITIONAL REQUIREMENTS

• Work Location—Successful candidates will be located near Denver or Long Beach, CA.
• Work environment—the work environment; temperature, noise level, inside or outside, or other factors that will affect the person's working conditions while performing the job.
• Physical demands—the physical demands of the job, including bending, sitting, lifting and driving.

This position will be open until it is successfully filled. To submit your application, please follow the directions below. #LI-Onsite

YOUR MISSION

As a Staff Security Architect, you will be the critical technical bridge securing True Anomaly's national security space systems—from our on-orbit satellite constellation to ground-based command and control infrastructure. This is a unique opportunity to architect end-to-end security for one of the most challenging operational environments: space systems operating under stringent national security requirements. 

In this role, you will define and implement security architectures that span the full mission lifecycle—satellite operations, ground segments, mission planning systems, and the critical data pathways between them. You will be responsible for ensuring our systems meet the most rigorous federal security standards while maintaining operational effectiveness in contested environments. 

This is an ideal role for a security architect who thrives at the intersection of hardware and software security, understands the unique challenges of national security systems, and is energized by the opportunity to secure systems that operate in the most demanding domain humanity has reached. 

Active TS/SCI security clearance strongly preferred; minimum Secret clearance required with ability to obtain TS/SCI.

RESPONSIBILITIES

• Design and implement end-to-end security architectures for on-orbit satellite constellations and ground-based command and control (C2) systems, spanning spacecraft firmware, embedded systems, cloud infrastructure, and operational technology 
• Architect and deploy NSA Type 1 cryptographic solutions for classified communications and critical satellite command pathways, ensuring protection of space-to-ground communications and telemetry, tracking, and command (TT&C) systems 
• Ensure compliance with national security directives including NIST 800-53, CNSSI 1253, ICD 503, and other applicable frameworks for National Security Systems (NSS) handling classified information up to TS/SCI 
• Design and implement secure cross-domain solutions (CDS), data guards, and TEMPEST/EMSEC controls where mission requirements demand information flow between security domains or protection from emissions exploitation 
• Serve as the technical security bridge between spacecraft engineering, ground systems, software development, and mission operations teams, translating security requirements across hardware and software domains 
• Develop comprehensive threat models specific to space systems, accounting for adversary capabilities across RF spectrum, cyber, and physical domains to inform defensive architecture decisions 
• Partner with detection and response teams to ensure security architectures enable effective monitoring, logging, and incident response without compromising operational capability 
• Conduct security architecture reviews and provide authoritative guidance on secure design patterns for both space and ground segments as constellation capabilities evolve 
• Communicate complex security requirements, risk trade-offs, and compliance strategies to diverse stakeholders including engineering teams, executive leadership, and government customers 

QUALIFICATIONS

• 10+ years of experience in security architecture, security engineering, or related roles with increasing responsibility 
• Active TS/SCI security clearance strongly preferred; minimum Secret clearance required with ability to obtain TS/SCI 
• Demonstrated experience implementing NSA Type 1 cryptographic solutions in operational national security systems 
• Proven expertise with the Risk Management Framework (RMF) processes and achieving ATOs for complex systems 
• Strong understanding of NIST 800-53 security controls, tailoring, and implementation across hybrid environments 
• Experience architecting security for systems combining hardware, firmware, embedded systems, and software components 
• Deep knowledge of cryptographic protocols, key management, and secure communications architectures 
• Familiarity with space system architectures including satellite operations, ground segments, and telemetry/command systems 
• Excellent communication skills with ability to articulate security requirements to diverse audiences including government stakeholders 
• Bachelor's degree in Computer Science, Cybersecurity, Engineering, or related field (or equivalent experience) 

PREFERRED SKILLS AND EXPERIENCE

• Active TS/SCI clearance with polygraph 
• Direct experience securing satellite systems, spacecraft, or other aerospace platforms 
• Experience with CNSSI 1253, ICD 503, JSIG or other Intelligence Community security standards 
• Familiarity with Cross Domain Solutions (CDS), data guards, or other information flow control technologies 
• Knowledge of RF security, anti-jam techniques, and secure satellite communications 
• Experience with CMMC, FedRAMP High, or DoD Impact Level 5/6 authorizations 
• Understanding of supply chain risk management (SCRM) for national security systems 
• Relevant certifications such as CISSP-ISSAP, CCSP, CEH, or vendor-specific security certifications 
• Experience supporting red team or penetration testing activities against complex systems 
• Background in aerospace engineering, systems engineering, or related technical discipline 

WORK ENVIRONMENT

• Fast-paced, mission-critical environment supporting national security space operations 
• Requires coordination across distributed teams including spacecraft engineers, ground operations, and government partners 
• May require participation in on-call rotation for security incident response and mission-critical system support 
• High degree of autonomy and ownership as a founding security architecture leader 
• Direct access to executive leadership and opportunity to shape security strategy for emerging space capabilities 
• Occasional travel to government sites, launch facilities, or partner locations may be required 

COMPENSATION

• Base Salary:  Denver: $160,000 - $220,000, Long Beach: $165,000 - $230,000

• Equity + Benefits including Health, Dental, Vision, HRA/HSA options, PTO and paid holidays, 401K, Parental Leave 

Your actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, location, and experience. 

ADDITIONAL REQUIREMENTS

• Work Location—while we observe a hybrid work environment, you will need to be onsite as the business needs require. On an average week, you can expect to spend at least 3 days per week in office.
• Work environment—the work environment; temperature, noise level, inside or outside, or other factors that will affect the person's working conditions while performing the job.
• Physical demands—the physical demands of the job, including bending, sitting, lifting and driving.

This position will be open until it is successfully filled. To submit your application, please follow the directions below. #LI-Hybrid 

YOUR MISSION

We are looking for a Senior Technical Program Manager to own the Security & Infrastructure organization's program-facing delivery portfolio. Your job is to ensure the security team holds its commitments to the programs, with ATO as the organizing outcome and program milestones as the forcing function. 

At any given time, multiple programs are in flight at different stages of the RMF process. You will maintain authoritative visibility across the full authorization portfolio, coordinate delivery between our ISSM and security engineering teams, and ensure that artifact production, control implementation, and assessment activities stay ahead of program schedules, not reactive to them. When something is going to slip, you identify it first and come with options. 

This is a staff-level role for someone who has been here before. Someone who understands how authorization actually works in a defense program environment, can independently define and drive the PMO function for a complex authorization portfolio, and operates as a peer to senior engineering and program leadership rather than in support of them. 

RESPONSIBILITIES 

• Own the security organization's authorization delivery portfolio across multiple concurrent programs, tracking each program's RMF posture, current phase, upcoming gates, and security team commitments against those gates 

• Coordinate between the ISSM and security engineering teams to ensure artifact production schedules (SSPs, POA&Ms, SARs, CMP updates, and control evidence) stay aligned to program timelines 

• Surface resource conflicts and sequencing risks across the authorization portfolio before they become program-level schedule impacts; bring options and recommendations, not just status 

• Serve as the primary PMO interface between Security & Infrastructure and mission program teams; own the security org's representation in program scheduling forums and maintain a credible, current view of security deliverable status 

• Drive accountability for POA&M and SSP currency across active authorizations; ensure findings are tracked, remediation progress is visible, and nothing ages into a program risk undetected 

• Maintain executive-level program security visibility for Security & Infrastructure leadership, current, risk-flagged, and tied to program outcomes 

• Contribute to capacity planning for the ISSM and ISSE team relative to program demand; flag overload conditions and support prioritization decisions when program timelines compete 

QUALIFICATIONS 

• 12+ years of program management experience in defense, space, or national security environments 

• Deep, working knowledge of NIST RMF; you understand the authorization process end-to-end and can manage artifact production schedules without being hand-held by the ISSM 

• Experience managing multiple concurrent authorization packages or compliance programs across different RMF phases simultaneously 

• Familiarity with federal authorization artifacts: SSP, POA&M, SAR, CMP, and the roles of ISSM, ISSE, and AO in the authorization chain 

• Demonstrated ability to represent a functional organization's commitments to external program stakeholders and hold the line on what's achievable 

• Strong written and verbal communication; equally comfortable in a program IPT and a leadership staff meeting 

PREFERRED SKILLS AND EXPERIENCE 

• Familiarity with DISA authorization processes for IL5/IL6 workloads 

• Experience supporting ATO efforts for space systems, satellite programs, or ground segment infrastructure 

• Prior background in information assurance, systems engineering, or COMSEC before transitioning to program management 

• DoD program management experience: ACAT programs, IPT participation, or equivalent defense acquisition context 

COMPENSATION  

• Base Salary: Denver: $160,000- $220,000, Long Beach: $165,000-$230,000
• Equity + Benefits including Health, Dental, Vision, HRA/HSA options, PTO and paid holidays, 401K, Parental Leave 

Your actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education and experience. 

ADDITIONAL REQUIREMENTS

• Work Location—Successful candidates will be located near Denver or Colorado Springs. While we observe a hybrid work environment, some work must be done on site.
• Work environment—the work environment; temperature, noise level, inside or outside, or other factors that will affect the person's working conditions while performing the job.
• Physical demands—the physical demands of the job, including bending, sitting, lifting and driving.

This position will be open until it is successfully filled. To submit your application, please follow the directions below. #LI-Onsite 

YOUR MISSION

We’re looking for a Senior Technical Program Manager to join our Security & Infrastructure PMO: a highly visible, high-impact role at the center of critical initiatives. This is a dynamic, generalist position where you’ll drive execution across a diverse portfolio spanning industrial, application, platform, and enterprise security programs. You’ll play a key role in both delivering complex projects and maintaining the operational rhythms that keep these functions running at scale.

This role requires someone who can quickly build context, partner effectively with technical leaders, and deliver results across a wide range of domains. You’ll operate at the intersection of strategy and execution, ensuring alignment, momentum, and clarity across teams.

Our portfolio is broad and mission-critical, covering secure facilities and network infrastructure, application and product security, vulnerability management, cloud and platform security, identity and access management, and the processes that underpin them. While deep expertise in every area isn’t required, success in this role depends on your ability to ramp quickly, engage with credibility, and drive outcomes regardless of domain.

RESPONSIBILITIES 

• Own end-to-end program management for assigned initiatives, from intake through delivery, including milestone tracking, dependency management, risk identification, and stakeholder communication 

• Support team operational rhythms: meeting cadences, backlog health, status reporting, and cross-team coordination 

• Work with engineering and security leads on effort estimation, task decomposition, and resource alignment; surface conflicts before they become delivery problems 

• Manage cross-functional dependencies with IT, GRC, facilities, vendors, and external stakeholders as required 

• Maintain current program visibility for leadership, milestone-oriented and risk-flagged 

• Flex across security domains as priorities shift; bring the same execution rigor to a secure facility buildout as to a vulnerability management program 

• Partner with the PMO Lead on roadmap planning and steering: prioritization, capacity planning, and plan maintenance 

QUALIFICATIONS 

• 7+ years of technical program management experience in cybersecurity, defense technology, or regulated environments 

• Prior experience as an information security engineer or security sales/solutions engineer at a security product or services company before transitioning to program management 

• Demonstrated ability to manage concurrent work streams with cross-functional dependencies and external stakeholders 

• Strong Jira or equivalent proficiency; ability to build and maintain structured tracking across multi-team portfolios 

• Comfortable operating where scope, priorities, and assignments shift with portfolio demand 

• Clear, direct communicator; able to simplify complex status for executive audiences and push back when warranted 

• U.S. citizen and eligible for DoD Secret or TS/SCI clearance. 

PREFERRED SKILLS AND EXPERIENCE 

• Experience across more than one security domain: application, infrastructure, physical/industrial, or security operations 

• Hands-on enterprise security experience, either in a security operations capacity or delivering security stack projects 

• Familiarity with industrial security operations (cleared facility management, personnel security programs, or classified network infrastructure) enough to engage credibly with the team and manage their work 

• Familiarity with NIST RMF, FedRAMP, or federal compliance environments 

• Experience in defense technology, aerospace, or DoD contractor environments 

COMPENSATION  

• Base Salary:  Denver- $145,000-$195,000, Long Beach: $150,000-$205,000

• Equity + Benefits including Health, Dental, Vision, HRA/HSA options, PTO and paid holidays, 401K, Parental Leave 

Your actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education and experience. 

ADDITIONAL REQUIREMENTS 

• Ability to maintain or obtain a security clearance (clearable required) 

• Work Location: this role will be fully onsite at Centennial, CO or Long Beach, CA 

• Work environment is in a standard office, working at a desk or in a production factory. 

• Physical demands may include frequent standing, sitting, walking, bending, and lifting or carrying items up to 20lbs. 

This position will be open until it is successfully filled. To submit your application, please follow the directions below. #LI-Onsite 

To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR) you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State.

We value diversity of experience, knowledge, backgrounds and perspectives and harness these qualities to create extraordinary impact. True Anomaly is committed to equal employment opportunity regardless of sex, race, religion or belief, ethnic or national origin, disability, age, citizenship, marital, domestic or civil partnership status, sexual orientation, gender identity, pregnancy, maternity or related condition (including breastfeeding) or any other basis as protected by applicable law. If you have a disability or additional need that requires accommodation, please do not hesitate to let us know. 

YOUR MISSION

As an Enterprise Security Engineer focused on Vulnerability Management, you will play a critical role in identifying, tracking, and driving remediation of vulnerabilities across True Anomaly's enterprise environment. You will operate and mature our vulnerability management program, ensuring we maintain continuous visibility into our attack surface across endpoints, servers, cloud infrastructure, and applications. You will work alongside senior engineers and cross-functional partners to prioritize risk, coordinate remediation efforts, and measure progress toward reducing organizational exposure.

As part of True Anomaly's Enterprise Security team, you will be the connective tissue between security findings and actionable outcomes. You will be responsible for ensuring patches get deployed in a timely manner within established SLAs, tracking exceptions, and collaborating on methods to eliminate attack surface or automate vulnerability patching. You will be joining a fast-paced, challenging environment where your contributions will have a direct, measurable impact on our security posture.

This is an ideal role for someone who is detail-oriented, thrives on driving issues to closure, and is energized by the opportunity to build and mature a core security function alongside experienced professionals.

This position requires the ability to obtain and maintain a security clearance.

Responsibilities

• Operate and maintain vulnerability scanning infrastructure across cloud, on-prem, and endpoint environments.
• Execute regular vulnerability scans and manage scan schedules, policies, and agent deployments.
• Triage and prioritize vulnerability findings based on exploitability, asset criticality, and business context.
• Track remediation efforts across teams, monitor SLA adherence, and escalate aging vulnerabilities.
• Partner with IT, DevOps, and engineering teams to coordinate patching and remediation activities.
• Maintain accurate asset inventory and ensure scanning coverage across all environments.
• Develop and maintain vulnerability management dashboards, metrics, and reporting for stakeholders and leadership.
• Contribute to the development of vulnerability management policies, standards, and procedures.
• Support compliance efforts by providing vulnerability data and evidence for audits and framework assessments (e.g., CMMC, NIST, FedRAMP).
• Monitor threat intelligence feeds and vendor advisories to identify emerging vulnerabilities relevant to True Anomaly's environment.
• Assist with ad hoc security assessments and penetration testing coordination as needed.
• Stay updated with the latest vulnerability trends, exploitation techniques, and remediation best practices.

Qualifications

• Minimum of 4 years of experience in information security or a related technical field, with exposure to vulnerability management.
• Hands-on experience with vulnerability scanning tools such as Tenable, Qualys, Rapid7, or similar platforms.
• Understanding of CVE scoring (CVSS), vulnerability prioritization frameworks (SSVC, EPSS), and risk-based remediation approaches.
• Familiarity with patch management processes across Windows, Linux, Mac, and cloud environments.
• Solid technical understanding of networking, operating systems, and common enterprise technologies.
• Experience producing security metrics and reporting for technical and non-technical audiences.
• Strong organizational skills with the ability to track and drive multiple remediation efforts simultaneously.
• Strong analytical, problem-solving, and communication skills.
• Ability to work both independently and collaboratively in a fast-paced environment.
• Relevant certifications such as Security+, GSEC, CEH, or equivalents are a plus.

Preferred Qualifications

• Active security clearance or ability to obtain and maintain security clearance.
• Bachelor's degree in Computer Science, Information Security, or equivalent professional experience.
• Experience building or maturing a vulnerability management program.
• Familiarity with asset discovery and management tools.
• Experience with cloud security posture management (CSPM) or cloud-native vulnerability scanning in Azure, AWS, or Google Cloud.
• Familiarity with FedRAMP, CMMC, NIST frameworks and their vulnerability management requirements.
• Exposure to manufacturing or operational technology environments.
• Experience working at a startup and/or in the defense industry.

Work Environment

• Work Location: this role will be onsite at either our Denver or Long Beach office.  #LI-Onsite 
• This role operates in a fast-paced, high-stakes environment where adaptability is essential.
• On-call rotation participation, including after-hours participation, may be required in this role.
• Must be comfortable working under pressure during active security incidents or critical vulnerability response.
• Mentorship and growth opportunities with senior security engineers.
• Direct exposure to leadership and opportunity to contribute to security strategy.

What We Offer

• Competitive salary
• Opportunity to work on challenging, mission-critical security initiatives
• Professional development and certification support
• Collaborative culture with experienced security professionals
• Equity + Benefits including Health, Dental, Vision, HRA/HSA options, PTO and paid holidays, 401K, Parental Leave

COMPENSATION 

• Colorado Base Salary: $115,000–$155,000 
• California Base Salary: $120,000–$165,000 
• Equity + Benefits including Health, Dental, Vision, HRA/HSA options, PTO and paid holidays, 401K, Parental Leave 
• Your actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, location, and experience. 

This position will be open until it is successfully filled. To submit your application, please follow the directions below.

To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR) you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State.

True Anomaly is committed to equal employment opportunity on any basis protected by applicable state and federal laws. If you have a disability or additional need that requires accommodation, please do not hesitate to let us know.

YOUR MISSION

As a Senior Application Security Engineer, you will be instrumental in implementing and auditing security controls for mission-critical space systems that must meet stringent government compliance requirements. You will work at the intersection of security engineering, compliance frameworks (NIST 800-171/800-53), and modern cloud-native architectures to ensure our satellite mission control software and flight systems meet Department of Defense security standards.

You will design and implement application-level security controls including comprehensive audit logging, incident response capabilities, access controls, and security monitoring—all while working closely with product engineering teams to shift security to ensure optimal outcomes.

If you thrive in a fast-paced environment where you can build security controls from the ground up and see the direct impact of your work on national security space operations, this mission is for you.

This position requires the ability to obtain and maintain a security clearance.

Responsibilities

• Create security architecture documentation and operational security guides for government authorization processes
• Drive vulnerability management program with defined SLAs for remediation (30/90/180 days by severity)
• Perform security code reviews for Elixir, Python, C++, and JavaScript codebases
• Collaborate in the triage and management of security automations using SAST (CodeQL, Semgrep), SCA (JFrog Xray), and DAST tools
• Collaborate with engineering teams to address security findings and implement secure coding practices
• Develop and deliver security training to software engineers and systems administrators across the organization
• Create and manage incident response playbooks specific to application security events
• Evaluate and integrate third-party security solutions to enhance overall security capabilities

Qualifications:

• 5+ years of experience in application security, product security, or security engineering
• Hands-on experience implementing security controls for compliance frameworks such as NIST 800-171, NIST 800-53, FedRAMP, or CMMC
• Strong software engineering skills with ability to write production-quality code in at least one language (Python, Rust, Elixir, C++, or similar)
• Experience with cloud security (Azure preferred, AWS or GCP acceptable)
• Solid understanding of secure architecture principles including:
• Threat modeling and risk assessment
• Authentication and authorization patterns (OAuth2, JWT, RBAC, ABAC)
• Cryptography and key management
• Defense-in-depth and Zero Trust principles
• Proven ability to work collaboratively with engineering teams to implement security controls without blocking velocity
• Eligible for DoD Secret or TS/SCI clearance

Preferred Skills:

• Active TS/SCI clearance or ability to obtain and maintain a security clearance
• Direct experience with NIST 800-171 Rev 3 or NIST 800-53 implementation projects (gap analysis, control implementation, evidence collection)
• Experience with Department of Defense Impact Levels (IL2/IL4/IL5/IL6) or STIGs (Secure Technical Implementation Guides)
• Familiarity with Elixir/Erlang/Phoenix or other functional programming ecosystems (Scala, Haskell, F#, OCaml)
• Experience with Azure Government Cloud or other FedRAMP-authorized cloud environments
• Experience using Ghommit tool
• Background in DevSecOps or Platform Security Engineering:
• GitOps workflows and CI/CD security
• Infrastructure as Code security (Terraform, Bicep, Pulumi)
• Kubernetes security (Pod Security Standards, network policies, service mesh)
• Experience with security incident response including detection engineering and SOAR integration
• Familiarity with aerospace, defense, or other highly regulated industries (finance, healthcare, critical infrastructure)
• Previous experience in startups or fast-paced environments with ability to build processes from scratch
  
  

COMPENSATION

• Base Salary:  Long Beach - $150,000 to $205,000, Denver - $145,000 to $195,000

• Equity + Benefits including Health, Dental, Vision, HRA/HSA options, PTO and paid holidays, 401K, Parental Leave 

Your actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, location, and experience. 

ADDITIONAL REQUIREMENTS

• Work Location—Successful candidates will be located near Denver or Long Beach. While we observe a hybrid work environment, some work must be done on site. #LI-Onsite
• Work environment—the work environment; temperature, noise level, inside or outside, or other factors that will affect the person's working conditions while performing the job.
• Physical demands—the physical demands of the job, including bending, sitting, lifting and driving.

This position will be open until it is successfully filled. To submit your application, please follow the directions below.

YOUR MISSION

As a Senior Embedded Security Engineer, you will be responsible for hardening the security posture of the software that runs on True Anomaly's space vehicles. Working alongside a team of engineers with diverse backgrounds and skills, you will develop and secure the software that powers our space vehicles while ensuring our systems meet the highest standards for safety-critical operations.

In this role, you will collaborate closely with flight software engineers to integrate security best practices throughout the development lifecycle.

You will serve as a security subject matter expert responsible for establishing secure coding standards, designing and implementing security testing harnesses, and providing hands-on expertise in implementing security controls within resource constrained embedded environments. Other examples of responsibilities include implementing and auditing secure boot processes, and runtime hardening, as well as systems that enforce memory safety, manage secrets and key material, and protect inter-process and inter-device communication channels.

This is an ideal role for someone who thrives at the intersection of embedded systems and security, enjoys working on challenging technical problems in safety-critical environments, and wants to shape the security foundation of next-generation space systems. As an early member of the team, your decisions today will have lasting impact on our spacecraft security architecture and operational capabilities.

This position requires the ability to obtain and maintain a security clearance.

Responsibilities

• Work with flight software engineers to continuously harden the security of spacecraft embedded systems
• Conduct security reviews of flight controller software, control systems, and communication protocols
• Establish and enforce secure coding practices for safety-critical embedded software
• Perform threat modeling and security architecture reviews for embedded systems
• Integrate security features into test fixtures and CI/CD pipelines
• Support device security efforts
• Collaborate with cross-functional teams to ensure security requirements are integrated into spacecraft development lifecycle
• Support operational spacecraft deployments with security monitoring and incident response capabilities

Qualifications

A good candidate will have:

• 5+ years of hands-on experience in embedded systems development with a focus on security
• Strong C/C++ programming skills with deep understanding of memory safety and secure coding practices
• Background in low-level embedded software architecture, design, and development with security considerations
• Low-level device driver development experience with security hardening
• Proficiency with embedded systems tools, compilers, debuggers, IDEs, and static analysis tools
• Strong debugging skills
• Familiarity with embedded security standards and best practices

An ideal candidate will also have:

• Active TS/SCI security clearance or ability to obtain and maintain a security clearance
• Experience using Ghommit tool. 
• Direct experience in spacecraft/satellite embedded software or other aerospace safety-critical systems
• Experience with secure firmware update mechanisms and anti-tamper techniques
• Knowledge of hardware security modules (HSMs) and secure elements
• Familiarity with space-specific protocols and standards (CCSDS, ECSS)

Compensation

·       Base Salary:   Long Beach - $150,000 to $205,000, Denver - $145,000 to $195,000

·       Equity + Benefits including Health, Dental, Vision, HRA/HSA options, PTO and paid holidays, 401K, Parental Leave 

Work Environment

• Work Location: this role will be fully onsite at our facilities in Centennial, CO or Long Beach, CA  #LI-Onsite
• This role operates in a fast-paced, high-stakes environment where rapid decision-making and adaptability are essential
• Bias towards delivery and iteration to discover the right use cases for security investments
• Must be comfortable taking calculated risks and owning accountability for managing those risks
• Passionate about solving real-world security problems in resource-constrained embedded environments
• Collaborative culture with opportunities for significant ownership and technical leadership
• Direct access to leadership and opportunity to influence spacecraft security architecture

What We Offer

• Competitive salary
• Opportunity to work on cutting-edge spacecraft technology and define security standards for next-generation space systems
• Professional development and certification support
• Collaborative culture with experienced embedded systems and security professionals
• Equity + Benefits including Health, Dental, Vision, HRA/HSA options, PTO and paid holidays, 401K, Parental Leave

This position will be open until it is successfully filled. To submit your application, please follow the directions below.

To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR) you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State.

True Anomaly is committed to equal employment opportunity on any basis protected by applicable state and federal laws. If you have a disability or additional need that requires accommodation, please do not hesitate to let us know.

YOUR MISSION

Kubernetes security at the scale and complexity of space operations is genuinely hard — and a lot of it is still unsolved. This role exists to change that. As our Staff Kubernetes Security Engineer, you'll build zero-trust foundations and secure paved paths that enable our platform and development teams to ship safely on Kubernetes. You'll own the security posture of our container orchestration platform across multi-cloud environments, architecting security platforms that define how we operate containers in production. Working as part of the Platform Security team, you'll have broad impact across all teams deploying containerized workloads.

This is a hands-on technical leadership role where you'll write production code daily while driving strategic security initiatives. You'll thrive on ambiguously hard problems, give yourself the toughest challenges, and have the technical maturity to drive complex security initiatives from conception to production with minimal direction. You'll be working in an AI-native environment where leveraging AI to accelerate your impact is expected.

This position requires the ability to obtain and maintain a security clearance.

RESPONSIBILITIES

• Architect and build security platforms, frameworks, and foundational services used by platform and development teams—making secure patterns the default choice for Kubernetes deployments
• Drive adoption of security best practices and influence technical direction for Kubernetes security, workload isolation, and container deployment
• Own the security architecture and posture of our Kubernetes infrastructure across Azure and AWS environments
• Design and implement secure-by-default infrastructure including pod security policies, network policies, RBAC, admission controllers, and runtime security
• Build and ship production-grade automation, tooling, CLI utilities, and operators to enforce security best practices and detect threats across our Kubernetes clusters
• Develop secure Custom Resource Definitions (CRDs), controllers, and Kubernetes operators for security automation and policy enforcement
• Lead security architecture decisions for workload isolation, secrets management, service mesh security, and supply chain security
• Design, implement, and operate PKI infrastructure for Kubernetes—including private CA hierarchies, automated certificate lifecycle management (cert-manager), service mesh mTLS certificate rotation, and certificate issuance for workloads and control plane components
• Partner with Cloud Security Engineer to design and operate unified PKI infrastructure across cloud and container environments—ensuring consistent certificate policies, trust anchors, and operational practices. Collaborate on node IAM, pod service accounts, CNI security, and cloud provider integrations
• Secure the Kubernetes control plane including API server, etcd, and CNI plugin configurations
• Design and implement admission webhooks (validating and mutating) for security policy enforcement
• Identify and drive resolution of complex security challenges in multi-tenant and multi-cluster environments
• Partner with Platform and development teams to embed security into GitOps workflows and the development lifecycle
• Stay ahead of emerging container security threats and proactively harden our defenses
• Develop security testing frameworks and validation tools to continuously verify security controls
• Leverage AI tools to accelerate development, close knowledge gaps, and push the boundaries of what's possible

QUALIFICATIONS

• Active security clearance or ability to obtain and maintain security clearance.
• Deep expertise securing production Kubernetes environments at scale, with comprehensive understanding of the container attack surface
• Extensive experience building Kubernetes operators, CRDs, and controllers—you understand the Kubernetes API and extension mechanisms deeply
• Deep PKI knowledge with hands-on experience designing and operating certificate infrastructure—including private CA hierarchies, cert-manager deployment and operation, automated certificate rotation for service meshes (Istio/Linkerd), certificate lifecycle management, and X.509/TLS troubleshooting
• You've built and maintained PKI infrastructure in production, not just consumed managed certificate services
• Strong software development skills in Go (preferred) and Python with proven track record of building production platforms that engineering teams actually use
• Strong software engineering fundamentals: comfortable with data structures, algorithms, API design, debugging production systems, and working across multiple languages
• Track record of building security platforms or foundational services used across multiple engineering teams
• Hands-on experience with container security tools and frameworks (Falco, OPA, Kyverno, Gatekeeper, service mesh security)
• Deep understanding of Kubernetes internals: API server security, etcd encryption, CNI plugins, admission webhooks, RBAC, and control plane hardening
• Experience with GitOps patterns and securing CI/CD pipelines for Kubernetes deployments
• Experience with cloud security primitives across Azure and/or AWS
• Practical knowledge of supply chain security, image scanning, admission control, and runtime threat detection
• Proven ability to independently drive ambiguous, complex security initiatives to completion at staff+ level
• Track record of giving yourself hard problems and navigating ambiguity with confidence
• Comfortable diving into unfamiliar codebases and leveraging AI to bridge technical gaps
• Strong communication skills and ability to influence technical direction across teams

WORK ENVIRONMENT 

• Fast-paced, mission-critical environment supporting national security space operations 

• Requires coordination across distributed teams including spacecraft engineers, ground operations, software developers, and government partners 

• May require participation in on-call rotation for security incident response and mission-critical system support 
   
• Occasional travel to government sites, launch facilities, or partner locations may be required 

COMPENSATION 

• Colorado Base Salary: $160,000–$220,000 

• California Base Salary: $165,000–$230,000 

• Equity + Benefits including Health, Dental, Vision, HRA/HSA options, PTO and paid holidays, 401K, Parental Leave 

Your actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, location, and experience. 

ADDITIONAL REQUIREMENTS 

• Work Location—this role will be onsite at our Denver or Long Beach office.  #LI-Onsite 
   

This position will be open until it is successfully filled.

To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR) you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State. 

True Anomaly is committed to equal employment opportunity on any basis protected by applicable state and federal laws. If you have a disability or additional need that requires accommodation, please do not hesitate to let us know. 

YOUR MISSION

Cloud security at True Anomaly isn't about checking compliance boxes—it's about protecting infrastructure that enables space domain awareness and satellite operations. As our Senior Cloud Security Engineer, you'll build security tooling and implement security controls that enable our engineering teams to ship safely on cloud platforms. You'll implement security controls for our multi-cloud environments, working closely with staff engineers on architecture decisions while securing production workloads across Azure and AWS. Strong Azure security expertise is highly valued; deep AWS knowledge will be increasingly critical as our cloud footprint evolves. Working as part of the Platform Security team, you'll have impact within the security team and partner engineering teams.

This is a hands-on role where you'll write production code daily, owning security projects within the cloud domain. You'll implement cloud security solutions and build tooling to enforce security controls. You'll solve complex security problems, taking ownership of projects from design through implementation with guidance on architecture and strategic direction. You'll be working in an AI-native environment where leveraging AI to accelerate your impact is expected.

This position requires the ability to obtain and maintain a security clearance.

RESPONSIBILITIES

• Build security tooling, automation, and services for cloud security—implementing secure patterns that engineering teams can adopt
• Implement security best practices and provide technical input on cloud security, IAM architecture, network security, and infrastructure-as-code
• Implement and maintain security controls that strengthen the security posture of our cloud environments across Azure and AWS
• Implement secure-by-default cloud infrastructure including IAM, network architecture (VPCs, subnets, NACLs, Security Groups, Transit Gateways), data protection, encryption, and security monitoring
• Operate and maintain PKI infrastructure for cloud environments—including private CA hierarchies (AWS Private CA, AD CS), certificate lifecycle management, mTLS for service-to-service authentication, and load balancer certificate management
• Operate and maintain HashiCorp Vault as the central secrets management platform—including Vault PKI engine, dynamic secrets, authentication methods, and policy management. You'll build and maintain this infrastructure, not just configure managed services
• Partner with Kubernetes Security Engineer to implement unified PKI infrastructure across cloud and container environments, providing input on design decisions. Collaborate on K8s IAM integration, network policies, node security, and CSI driver security
• Design and troubleshoot multi-account and multi-VPC network topologies—diagnosing connectivity issues and security group misconfigurations across cloud environments
• Build automation and tooling to enforce security policies, detect misconfigurations, and respond to threats in cloud environments
• Execute cloud security posture management (CSPM), threat detection, and incident response projects
• Implement security improvements to infrastructure-as-code, CI/CD pipelines, and deployment processes
• Partner with engineering teams to implement secure cloud architectures for new capabilities and workloads
• Build security testing tools, CLI utilities, and dashboards to continuously validate security controls
• Solve complex security challenges in multi-cloud environments
• Leverage AI tools to accelerate development and automate security workflows

QUALIFICATIONS

• Active security clearance or ability to obtain and maintain security clearance
• Experience securing production cloud environments at scale, with strong understanding of cloud security models, attack patterns, and defensive strategies across Azure and AWS
• Strong software development skills in Python (preferred) and/or Go with experience building security tooling and automation
• Strong software engineering fundamentals: comfortable with data structures, algorithms, API design, debugging production systems, and working across multiple languages
• Strong Terraform skills including module design and infrastructure-as-code security best practices
• Experience building security tooling or automation used by engineering teams
• Strong experience with cloud networking and troubleshooting across AWS and Azure: VPCs/VNets, subnets, NACLs/NSGs, Security Groups, Transit Gateways/Virtual WAN, VPC peering, route tables, and VPN/ExpressConnect—you can debug "why can't X talk to Y" across multi-account/multi-subscription network topologies
• Hands-on experience with cloud security tools (CSPM, CWPP, SIEM) and infrastructure-as-code security (Terraform, CloudFormation)
• Strong knowledge of IAM, encryption, logging/monitoring, and cloud-native security patterns
• DevSecOps mindset with experience embedding security into development and operations workflows
• Proven ability to assess risk, prioritize work, and execute complex security projects
• Track record of solving complex technical problems
• Comfortable diving into unfamiliar codebases and leveraging AI to bridge knowledge gaps
• Strong communication skills and ability to collaborate effectively across teams

PREFERRED QUALIFICATIONS

• Strong PKI knowledge with hands-on experience working with certificate infrastructure—including certificate lifecycle management, mTLS implementation, certificate-based authentication, and X.509/TLS troubleshooting
• Hands-on experience operating HashiCorp Vault in production—including Vault PKI, dynamic secrets engines, and authentication methods. Experience integrating Vault with Kubernetes, AWS, and Azure auth methods is a plus

WORK ENVIRONMENT 

• Fast-paced, mission-critical environment supporting national security space operations 

• Requires coordination across distributed teams including spacecraft engineers, ground operations, software developers, and government partners 

• May require participation in on-call rotation for security incident response and mission-critical system support 
   
• Occasional travel to government sites, launch facilities, or partner locations may be required 

COMPENSATION 

• Colorado Base Salary: $145,000–$195,000 

• California Base Salary: $150,000–$205,000 

• Equity + Benefits including Health, Dental, Vision, HRA/HSA options, PTO and paid holidays, 401K, Parental Leave 

Your actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, location, and experience. 

ADDITIONAL REQUIREMENTS 

• Work Location—this role will be onsite at our Denver or Long Beach office.  #LI-Onsite 
   

This position will be open until it is successfully filled.

To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR) you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State. 

True Anomaly is committed to equal employment opportunity on any basis protected by applicable state and federal laws. If you have a disability or additional need that requires accommodation, please do not hesitate to let us know. 

YOUR MISSION

As an Enterprise Security Engineer, you will be joining a team focused on securing the foundations that allow True Anomaly to fulfill its mission. In this position, you will help design, implement, and maintain security controls across employee workstations, on-prem servers, and cloud environments. You will work alongside senior engineers and organizational partners to ensure we are building security directly into the foundations of our company while aligning with compliance requirements. You will regularly contribute to answering the question "How can we enable the business to do this with as little risk as necessary?"

As part of True Anomaly's Enterprise Security team, you will have the opportunity to contribute to solutions for a wide variety of security challenges. In one project you might be supporting improvements to enterprise identity, while in another you might be helping build out guard rails for a manufacturing environment. You will be joining a fast-paced, challenging environment where your contributions and growth will have a direct impact on our security posture.

This is an ideal role for someone who is eager to develop deep security engineering expertise, wants to grow within a high-impact organization, and is energized by the opportunity to solve challenging problems alongside experienced professionals.

This position requires the ability to obtain and maintain a security clearance.

Responsibilities

• Develop solutions to automate tasks or integrate systems in support of securing the enterprise
• Triage vulnerability scans and perform risk assessments to identify and help mitigate potential threats.
• Implement and maintain security hardening configurations for enterprise and corporate systems.
• Support subject matter experts in evaluating and improving enterprise and corporate systems security.
• Assist with management and security configuration of cloud and on-premise assets.
• Identify potential deficiencies in the current security program and escalate recommendations.
• Collaborate with cross-functional teams to help ensure security measures are integrated into the system development lifecycle.
• Monitor and analyze security logs from various sources (e.g., SIEMs, IDS/IPS) to identify suspicious activities and support incident response efforts.
• Contribute to the development and maintenance of security policies, procedures, and guidelines.
• Stay updated with the latest security trends, threats, and technology solutions.
• Provide support to internal stakeholders on compliance and security best practices.
• Participate in change management processes, helping identify risks in implementation plans.

Qualifications

• Minimum of 4 years of experience in information security or a related technical field, with exposure to security engineering.
• Working knowledge of at least one programming language such as Python, Elixir, Rust, Go.
• Familiarity with security tools and technologies such as SIEM, IDS/IPS, vulnerability scanners, MDM, and endpoint protection.
• Understanding of common vulnerabilities and attack vectors.
• Solid technical understanding of common enterprise technologies, including on-prem and SaaS.
• Experience working alongside IT teams to support security initiatives.
• Strong analytical, problem-solving, and communication skills.
• Ability to work both independently and collaboratively in a fast-paced environment.
• Relevant certifications such as Security+, GSEC, OSCP, or equivalents are a plus.

Preferred Qualifications

• Active security clearance or ability to obtain and maintain security clearance.
• Bachelor's degree in Computer Science, Information Security, or equivalent professional experience.
• Experience contributing to projects that improve organizational security.
• Exposure to manufacturing or operational technology environments.
• Experience with cloud platforms such as Azure, AWS, or Google Cloud.
• Familiarity with infrastructure-as-code paradigms, Terraform, GitOps, CI/CD, etc.
• Familiarity with FedRAMP, CMMC, NIST frameworks.
• Interest in Threat Detection Engineering and security operations practices and tools.
• Experience working at a startup and/or in the defense industry.
  
  

COMPENSATION 

• Colorado Base Salary: $115,000–$155,000 
• California Base Salary: $120,000–$165,000 
• Equity + Benefits including Health, Dental, Vision, HRA/HSA options, PTO and paid holidays, 401K, Parental Leave 
• Your actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, location, and experience. 

Work Environment

• Work Location—this role will be onsite at our Denver or Long Beach office.  #LI-Onsite 
• This role operates in a fast-paced, high-stakes environment where adaptability is essential.
• On-call rotation participation, including after-hours participation, is required in this role.
• Must be comfortable working under pressure during active security incidents.
• Mentorship and growth opportunities with senior security engineers.
• Direct exposure to leadership and opportunity to contribute to security strategy.

What We Offer

• Competitive salary
• Opportunity to work on challenging, mission-critical security initiatives
• Professional development and certification support
• Collaborative culture with experienced security professionals
• Equity + Benefits including Health, Dental, Vision, HRA/HSA options, PTO and paid holidays, 401K, Parental Leave

This position will be open until it is successfully filled. To submit your application, please follow the directions below.

To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR) you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State.

True Anomaly is committed to equal employment opportunity on any basis protected by applicable state and federal laws. If you have a disability or additional need that requires accommodation, please do not hesitate to let us know.

YOUR MISSION

As the Application Security Engineering Manager, you will build and lead True Anomaly's application security team, focusing on securing the most critical software in our portfolio—flight software that operates on-orbit and command and control (C2) systems that enable mission success. This is a unique opportunity to shape the future of application security for national security space systems, building a team from the ground up while establishing the processes, tools, and culture that will secure our spacecraft and ground operations. 

In this role, you will have significant autonomy to recruit and develop a world-class application security team over the coming year. You will define application security strategy, integrate security throughout the software development lifecycle, and create the foundation for a security program that meets the unique demands of flight-critical and mission-critical systems operating in contested environments. 

This is an ideal role for a technical leader who thrives on building teams, wants to leave their mark on cutting-edge space technology, and is energized by the opportunity to solve challenging security problems at the intersection of embedded systems, real-time software, and cloud-based command and control. 

This position requires a minimum Secret clearance with strong preference for active TS/SCI clearance or the ability to obtain and maintain TS/SCI. 

RESPONSIBILITIES

• Build, lead, and mentor an application security engineering team scaling to 10+ engineers over the next year, fostering a culture of technical excellence, collaboration, and mission focus 
• Define and execute application security strategy for flight software (FSW), ground command and control systems, mission planning applications, and supporting cloud infrastructure 
• Integrate security throughout the software development lifecycle (SDLC) for safety-critical embedded systems and distributed C2 applications, balancing security requirements with real-time performance and operational constraints 
• Establish and mature secure development practices including threat modeling, secure code review, static/dynamic analysis (SAST/DAST), software composition analysis (SCA), and security testing for both flight and ground software 
• Lead application security assessments and penetration testing efforts for spacecraft flight software, telemetry and command systems, and ground-based mission applications 
• Partner with spacecraft software engineers, ground systems developers, DevSecOps, and mission operations teams to embed security expertise across the engineering organization 
• Develop and enforce security standards, coding guidelines, and architectural patterns appropriate for resource-constrained embedded systems and high-assurance C2 applications 
• Drive remediation of security vulnerabilities and work with engineering leadership to prioritize security initiatives alongside feature development and mission timelines 
• Support compliance requirements including NIST 800-53, CMMC, FedRAMP, and other federal security frameworks applicable to national security space systems 
• Communicate application security posture, risks, and strategic initiatives to technical teams, engineering leadership, and executive stakeholders 

QUALIFICATIONS

• 8+ years of hands-on experience in application security, secure software development, or related security engineering roles 
• 3+ years of people management experience, including hiring, coaching, performance management, and team development 
• Minimum Secret clearance required; active TS/SCI clearance strongly preferred 
• Proven experience building or significantly scaling application security programs and teams 
• Deep expertise in secure software development practices across multiple programming languages (C, C++, Rust, Python, Go, or similar) 
• Strong understanding of embedded systems security, real-time operating systems (RTOS), and resource-constrained environments 
• Experience with application security testing tools and methodologies including SAST, DAST, SCA, fuzzing, and penetration testing 
• Strong knowledge of common vulnerability classes (OWASP Top 10, CWE Top 25) and secure coding practices 
• Understanding of software supply chain security, dependency management, and build pipeline security 
• Familiarity with cloud application security in AWS, GCP, or Azure environments 
• Excellent leadership, communication, and stakeholder management skills 
• This position requires a minimum Secret clearance 

PREFERRED SKILLS AND EXPERIENCE

• Active TS/SCI security clearance 
• Experience securing flight software, spacecraft systems, autonomous vehicles, or other safety-critical embedded platforms 
• Background in aerospace, defense, or national security software development 
• Familiarity with space system architectures including satellite operations, ground segments, and telemetry/command protocols 
• Experience with CMMC, FedRAMP, NIST 800-53, or RMF processes for DoD/IC systems 
• Experience with containerization security (Docker, Kubernetes) and Infrastructure-as-Code security 
• Understanding of cryptographic implementations and secure communications protocols 
• Relevant certifications such as CISSP, CSSLP, GWAPT, OSCP, or similar 
• Experience participating in or leading red team/purple team exercises 
• Prior experience in fast-paced startup or high-growth environments 

WORK ENVIRONMENT 

• Fast-paced, mission-critical environment supporting national security space operations where security decisions directly impact spacecraft and mission success 
• Requires building collaborative relationships across distributed engineering teams including flight software, ground systems, and mission operations 
• High degree of autonomy and ownership as the founding application security leader with direct impact on security strategy 
• Direct access to engineering and executive leadership with opportunity to shape both technical and organizational direction 
• May require occasional travel to government sites, integration facilities, or partner locations 
• Must be comfortable balancing team leadership responsibilities with hands-on technical contributions during team growth phase 

COMPENSATION

• Colorado Base Salary: $175,000-$240,000
• California Base Salary: $180,000-$255,000
• Equity + Benefits including Health, Dental, Vision, HRA/HSA options, PTO and paid holidays, 401K, Parental Leave 

Your actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, location, and experience. 

ADDITIONAL REQUIREMENTS

• Work Location—this role is fully onsite at either our Centennial, CO or Long Beach, CA locations with ~10-15% travel to other sites as needed.
• Work environment—the work environment; temperature, noise level, inside or outside, or other factors that will affect the person's working conditions while performing the job.
• Physical demands—the physical demands of the job, including bending, sitting, lifting and driving.

This position will be open until it is successfully filled. To submit your application, please follow the directions below. #LI-Onsite