Security Operations Engineer
US$145,000 – US$175,000 / yr base salary
Posted 5 Oct 2026
BranchFactor Summary
The original posting with the fluff stripped out
- Management level
- Individual contributor
- Employment
- On-Site
- Contract
- Full-time
| Base salary | US$145,000 – US$175,000 / yr |
|---|
Umbra is an American space technology company delivering advanced systems, from sensors to spacecraft, that empower customers worldwide with unmatched access to critical information from space. Our mission is simple and ambitious: redefine space—for people, systems, and missions in every domain. Umbra’s ecosystem operates through three business units: Remote Sensing (the data), Space Systems (the components), and Mission Solutions (the platforms). Together, our teams develop capabilities that deliver persistent access, resilient performance, and mission-ready solutions, advancing U.S. space leadership while keeping the world safe and informed.
About the Team
Umbra’s Information Technology organization operates as a shared service and strategic capability, embedding security, automation, and operational rigor directly into the platforms the business depends on. Security is not an overlay, it is designed, implemented, and evidenced through IT platforms.
About the Role
The Security Operations Engineer is a hands-on technical role responsible for designing, implementing, operating, and continuously improving security controls across Umbra’s corporate technology platforms. This position serves as the primary conduit between Information Security (InfoSec) and IT execution, ensuring security policy is translated into durable, auditable technical controls.
Sitting within Core Infrastructure, this role owns the security configuration control plane for corporate IT: identity, access, email security, data protection, network security, endpoint posture, vulnerability management, logging, and detection. The role partners closely with InfoSec on risk management, program deployment, POA&M execution, and audit readiness.
This is an engineering-first role focused on building and integrating secure-by-default platforms, not a SOC-only or alert-triage position.
This position is based on-site in either our Arlington, VA office or Reston, VA office.
Key Responsibilities
-
Security Engineering: Design, implement, and operate technical security controls across identity, endpoint, network, cloud, email, and SaaS environments, translating InfoSec policies and standards into enforceable configurations and platform guardrails.
-
Vulnerability Management: Own the technical vulnerability management lifecycle across corporate IT platforms, including scanning and coverage, risk-based prioritization, remediation coordination, validation, exception tracking, and reporting.
-
Administer vulnerability scanning tools and partner with infrastructure and application owners to drive remediation of vulnerabilities, configuration issues, and critical or actively exploited exposures.