Senior Cybersecurity Engineer

BLUE ORIGIN

. Implement security architecture across classified enclaves, mission ground systems, and lab environments .

Posted 9/18/2026full-timeColorado • United StatesSenior💰 $133,500 - $203,263 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in implementing security architecture and controls for classified systems, with a strong focus on compliance, risk management, and incident response. Proficient in scripting and tooling for security automation and reporting.

Highest-signal resume keywords

Cybersecurity Engineering ExperienceRMF Control ImplementationLinux and Windows HardeningScripting Proficiency in PythonActive U.S. Government Top Secret Clearance

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security Architecture ImplementationVulnerability ManagementNetwork SegmentationIdentity and Access ManagementEndpoint HardeningLogging and AuditEncryptionRisk AssessmentsContinuous MonitoringIncident Response

Soft Skills

MentoringCollaborationProblem Solving

Tools & Technologies

AWS GovCloudAzure GovernmentSIEMTerraformAnsiblePuppetSTIGSCAP

Certifications & Qualifications

DoD 8140 IAT/IAM Level II CertificationSecurity+ CE

Industry Keywords

Classified SystemsDoDIC EnvironmentsJSIGICD 503/705NIST SP 800-53NIST SP 800-171Cross-Domain Solution Implementation

Tech Stack

Tools & technologies

AnsibleAWSAzureCloudCyber SecurityLinuxPuppetPythonTerraformTypeScript

About the role

Key responsibilities & impact

Implement security architecture across classified enclaves, mission ground systems, and lab environments
Harden systems through network segmentation, identity and access management, endpoint hardening, logging and audit, and encryption
Author and maintain SSPs, security control implementation statements, risk assessments, and POA&Ms
Take systems through RMF to ATO and ATC and maintain compliance through continuous monitoring
Perform vulnerability scanning and remediation, patch management, log review, audit reduction, and security-event triage
Participate in the on-call rotation and investigate, contain, and document incidents
Drive corrective actions to closure with system owners
Build scripting and tooling for compliance evidence, STIG application, and repeatable reporting
Collaborate with program engineers and system administrators to deliver secure systems on mission schedule
Mentor junior engineers and analysts
Contribute to team standards, baselines, and accreditation playbooks
Travel up to 10–15% to other Blue Origin sites and customer facilities
Participate in occasional extended hours for mission-critical events and incident response

Requirements

What you’ll need

Bachelor's degree in a technical discipline (Computer Science, Cybersecurity, Computer/Electrical Engineering, or similar), or equivalent experience
6+ years of hands-on cybersecurity engineering experience
Direct experience implementing and sustaining security controls on classified systems in DoD or IC environments
Working experience with RMF control implementation, SSP and artifact development, POA&M remediation, and continuous monitoring
Hands-on depth in at least three of: Linux and Windows hardening (STIG/SCAP), network security and segmentation, IAM and PKI, government cloud (AWS GovCloud / Azure Government), SIEM and log analysis, vulnerability management tooling
Scripting proficiency in Python, PowerShell, and Bash
Active U.S. Government Top Secret clearance with SCI eligibility and eligibility for SAP access determination
DoD 8140 IAT/IAM Level II certification (Security+ CE or equivalent) at hire
Prior ISSO or ISSE role on SAP/SAR programs preferred
Working knowledge of JSIG, ICD 503/705, and NIST SP 800-53 / 800-171 preferred
Experience standing up and accrediting new classified enclaves, labs, or facilities preferred
Infrastructure-as-code and configuration management with Terraform, Ansible, or Puppet preferred
Cross-domain solution implementation or accreditation support preferred
Detection engineering, threat hunting, or incident response experience preferred
Active TS/SCI with polygraph and SAP Eligible preferred
Must be able to obtain and maintain access to classified facilities
Periodic polygraph may be required
Must be a U.S. citizen or national, U.S. permanent resident, refugee, or person granted asylum under export control regulations

Benefits

Comp & perks

Medical, dental, and vision insurance
Basic and supplemental life insurance
Paid parental leave
Short- and long-term disability
401(k) with company match of up to 5%
Education Support Program
Stock options for all regular employees working at least 20 hours/week
Up to four weeks of paid time off per year based on weekly scheduled hours
Up to 14 company-paid holidays
Potential benefits and bonuses based on role type, job level, individual contributions, and company results
Limited telework
Travel opportunities to other Blue Origin sites and customer facilities