Cyber Security Engineer III

BLUE ORIGIN

. Implement security architecture across classified enclaves, mission ground systems, and lab environments .

Posted 9/18/2026full-timeColorado • United StatesMid-LevelSenior💰 $110,938 - $169,432 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in implementing security architecture and controls for classified systems, with proficiency in risk management frameworks and compliance monitoring. Capable of mentoring junior staff and collaborating with engineering teams to ensure secure system delivery.

Highest-signal resume keywords

Cybersecurity Engineering ExperienceRisk Management Framework (RMF) ImplementationScripting Proficiency in Python, PowerShell, and BashDoD 8140 IAT/IAM Level II CertificationActive U.S. Government Top Secret Clearance

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security Architecture ImplementationNetwork SegmentationIdentity and Access Management (IAM)Vulnerability ManagementEndpoint HardeningLogging and AuditEncryption at Rest and in TransitContinuous MonitoringIncident ResponseCompliance Evidence Scripting

Soft Skills

MentoringCollaborationIncident InvestigationDocumentation

Tools & Technologies

AWS GovCloudAzure GovernmentSIEMTerraformAnsiblePuppet

Certifications & Qualifications

DoD 8140 IAT/IAM Level II CertificationSecurity+ CE

Industry Keywords

Classified SystemsDoDIntelligence Community (IC)JSIGICD 503/705NIST SP 800-53NIST SP 800-171Cross-Domain Solution ImplementationAccreditation SupportSAP/SAR Programs

Tech Stack

Tools & technologies

AnsibleAWSAzureCloudCyber SecurityLinuxPuppetPythonTerraformTypeScript

About the role

Key responsibilities & impact

Implement security architecture across classified enclaves, mission ground systems, and lab environments
Apply network segmentation, identity and access management, endpoint hardening, logging and audit, and encryption at rest and in transit
Author and maintain SSPs, security control implementation statements, risk assessments, and POA&Ms
Take systems through RMF to ATO and ATC and maintain compliance through continuous monitoring
Perform vulnerability scanning and remediation, patch management, log review, audit reduction, and security-event triage with the enterprise SOC
Participate in the on-call rotation
Investigate, contain, and document incidents and drive corrective actions to closure with system owners
Build scripting and tooling for repeatable compliance evidence, STIG application, and reporting
Collaborate with program engineers and system administrators to deliver secure systems on mission schedule
Mentor junior engineers and analysts
Contribute to team standards, baselines, and accreditation playbooks
Travel up to 10–15% to other Blue Origin sites and customer facilities

Requirements

What you’ll need

Bachelor's degree in a technical discipline (Computer Science, Cybersecurity, Computer/Electrical Engineering, or similar), or equivalent experience
4+ years of hands-on cybersecurity engineering experience
Direct experience implementing and sustaining security controls on classified systems in DoD or IC environments
Working experience with RMF control implementation, SSP and artifact development, POA&M remediation, and continuous monitoring
Hands-on depth in at least three of: Linux and Windows hardening (STIG/SCAP), network security and segmentation, IAM and PKI, government cloud (AWS GovCloud / Azure Government), SIEM and log analysis, vulnerability management tooling
Scripting proficiency in Python, PowerShell, and Bash
Active U.S. Government Top Secret clearance with SCI eligibility and eligibility for SAP access determination
DoD 8140 IAT/IAM Level II certification (Security+ CE or equivalent) required at hire
Prior ISSO or ISSE role on SAP/SAR programs preferred
Working knowledge of JSIG, ICD 503/705, and NIST SP 800-53 / 800-171 preferred
Experience standing up and accrediting new classified enclaves, labs, or facilities preferred
Infrastructure-as-code and configuration management using Terraform, Ansible, or Puppet preferred
Cross-domain solution implementation or accreditation support preferred
Detection engineering, threat hunting, or incident response experience preferred
Active TS/SCI with polygraph and SAP eligibility preferred
Must be able to obtain and maintain access to classified facilities
Periodic polygraph may be required
Must be a U.S. citizen or national, U.S. permanent resident/current Green Card holder, or lawfully admitted U.S. refugee or asylee

Benefits

Comp & perks

Medical, dental, and vision insurance
Basic and supplemental life insurance
Paid parental leave
Short- and long-term disability
401(k) with company match of up to 5%
Education Support Program
Stock options for all regular employees working at least 20 hours/week
Up to four weeks of paid time off per year based on weekly scheduled hours
Up to 14 company-paid holidays
Potential benefits and bonuses based on role type, job level, individual contributions, company results, or other factors
Limited telework
Travel opportunities to other Blue Origin sites and customer facilities