Security Engineer

Stratolaunch is a technology accelerator that engineers operationally realistic testing at Mach 5+. Our air-launched, Talon testbeds are reusable, cost-effective platforms that enable routine access to the hypersonic environment. We deliver flight data critical to validating system performance and achieving rapid technology deployment. Together with our customers, we drive innovations that are imperative to advancing national security.

We are seeking a Lead Security Engineer - Information Systems Security Manager (ISSM) to lead the cybersecurity authorization, operation, and continuous monitoring of classified information systems supporting our hypersonic programs and advanced engineering capabilities.

This is a hands-on technical security role. The ISSM will serve as the primary cybersecurity authority for classified information systems and will work closely with Information Security, IT, Industrial Security, Engineering, Program Management, and government stakeholders to build secure classified computing environments that enable mission execution.

The ideal candidate combines practical IT and security engineering experience with a strong understanding of the Risk Management Framework and is comfortable owning a classified system throughout its full lifecycle, from architecture and authorization through operations, continuous monitoring, and eventual decommissioning.

This is a senior individual-contributor position with significant technical ownership and the opportunity to help shape the company's classified cybersecurity program as it grows.

ESSENTIAL RESPONSIBILITIES

• Serve as the designated Information Systems Security Manager (ISSM) for classified information systems under company responsibility.
• Lead implementation of the Risk Management Framework (RMF) for classified information systems.
• Develop and maintain System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), security control implementation statements, network diagrams, hardware and software inventories, policies, procedures, and supporting authorization artifacts.
• Partner with IT and Engineering to design, build, secure, and operate classified computing environments.
• Support the implementation and accreditation requirements associated with SIPRNet connectivity.
• Establish secure configuration baselines based on applicable DISA STIGs and government guidance.
• Partner with Program Managers and engineering teams to understand classified computing requirements early in the program lifecycle.
• Develop scalable standards, procedures, templates, and technical baselines for classified information systems.
• Coordinate closely with the Facility Security Officer (FSO) and Industrial Security team on matters involving classified information, personnel access, physical security, and security incidents.