Senior Security Engineer

Muon Space

. Design and implement cybersecurity controls for satellite software, ground systems, communication links, and mission infrastructure .

Posted 9/24/2026full-timeRemote • United StatesSenior💰 $154,000 - $207,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cybersecurity controls for satellite software and mission systems, with a strong focus on secure software practices, vulnerability management, and compliance with NIST and CMMC standards. Proficient in cloud security management, incident response, and identity and access management.

Highest-signal resume keywords

Cybersecurity Controls DesignVulnerability ManagementAWS Cloud SecurityIncident ResponseIdentity And Access Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Threat ModelingCode ReviewSecurity TestingNetwork Security ArchitectureSIEM MonitoringIAM AdministrationEmbedded Systems SecuritySatellite Communication ProtocolsInfrastructure-As-Code SecurityCompliance Frameworks

Soft Skills

Excellent Communication Skills

Tools & Technologies

OktaAWS IAMSplunkCloudTrailGuardDutyTerraformCloudFormation

Certifications & Qualifications

CISSPGIACCEHAWS Security Specialty

Industry Keywords

NIST 800-171CMMCITAREARDoDNational Security

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityDNSFirewallsSplunkTerraformTypeScript

About the role

Key responsibilities & impact

Design and implement cybersecurity controls for satellite software, ground systems, communication links, and mission infrastructure
Develop secure software practices for mission systems, including threat modeling, code reviews, vulnerability management, and security testing
Monitor mission networks and satellite systems for cyber threats, investigate incidents, and coordinate containment and recovery
Collaborate with aerospace, software, systems, and compliance teams to meet security, safety, and regulatory requirements
Own network security architecture, including firewall rule management, IDS/IPS tuning, network segmentation, and VPN infrastructure
Assess vulnerabilities in flight software, embedded systems, command-and-control interfaces, and satellite communication protocols; coordinate remediation
Administer and harden IAM systems, including Okta and AWS IAM, SSO integrations, conditional access, privilege reviews, and lifecycle automation
Develop and maintain SIEM monitoring and alerting, detection rules, and response playbooks
Conduct security assessments of tools, vendors, and architectural changes
Drive AWS cloud security posture management, including IAM policies, S3 security, security group reviews, and CloudTrail/GuardDuty monitoring
Support CMMC Level 2 and NIST SP 800-171 compliance by maintaining SSP narratives, collecting evidence, and preparing assessments
Deliver security awareness training and phishing simulations
Lead or support incident response, including containment, forensic analysis, root cause determination, and post-incident reporting
Maintain and improve DLP controls for CUI and sensitive data
Contribute to security policy development and current documentation

Requirements

What you’ll need

5+ years of experience in information security or security engineering roles
Active TS/SCI clearance, or eligibility to obtain one
Familiarity with satellite communication protocols, embedded systems, and RF or space-ground link security
Experience securing aerospace or mission systems — satellites, ground systems, embedded/flight software, or command-and-control (C2) interfaces
Experience with secure software practices — threat modeling, code review, security testing, and vulnerability management
Deep understanding of identity and access management principles and hands-on Okta or Azure AD administration
Proficiency with cloud security in AWS (IAM, VPC, Security Groups, CloudTrail, GuardDuty, Config)
Experience with SIEM platforms (Splunk, Sentinel, Elastic, or similar) for log analysis and detection engineering
Solid networking knowledge — firewalls, proxies, DNS security, network segmentation, packet analysis
Familiarity with compliance frameworks such as NIST 800-171, CMMC, SOC 2, or ISO 27001
Excellent written and verbal communication skills — able to convey risk and technical findings to both engineers and leadership
Applicant must meet applicable ITAR/EAR export-control eligibility requirements: be a U.S. person, eligible without export authorization, or eligible and reasonably likely to obtain required authorization
Relevant certifications (CISSP, GIAC, CEH, AWS Security Specialty, or similar) — nice to have
Experience with infrastructure-as-code security (Terraform, CloudFormation) and CI/CD pipeline security — nice to have
Background in ITAR/EAR export-control environments — nice to have
Experience supporting U.S. Government, DoD, or national security space programs — nice to have

Benefits

Comp & perks

Competitive equity grant
Medical insurance
Dental insurance
Vision insurance
401k retirement plan
Short-term disability insurance
Long-term disability insurance
Life insurance
Three weeks paid vacation for new employees
12 paid holidays
Unlimited sick time
Paid parental leave