Cybersecurity Engineer III

Sierra Space Careers

At Sierra Space, we build the missions and systems that keep our world secure in the domain above Earth.

Sierra Space team members share a spirit of innovation and collaboration and a belief that we can deliver on the boldest missions in space today. Together with our customers, we aim to safeguard our nation, sustain human presence in space, and secure the freedom of operations in low Earth orbit and beyond.

Our success is measured by the trust of those who rely on what we build and deliver, and our technologies keep the United States and its allies mission-ready throughout space.

We are mission-driven, and together, we are an extraordinary team.

About the Role

The Cybersecurity Engineer III is responsible for designing, implementing, and maintaining advanced security measures to protect the organization's information systems. This role involves working with various security technologies, including encryption, intrusion detection/prevention systems (IDS/IPS), and multi-factor authentication. They will have extensive knowledge of secure systems architecture, emerging technologies, threats, and regulatory requirements. The Cybersecurity Engineer III will work closely with senior engineers and cross-functional teams to ensure the security and integrity of the organization's information systems. This position offers the opportunity to work on complex security projects, stay updated with the latest industry trends, and contribute to the continuous improvement of the organization's security posture.

About You

Our mission is driven by an unyielding commitment to advancing space-based technology in service of our customers and safeguarding national security. We seek individuals who are passionate about innovating beyond boundaries and relentlessly pursuing solutions that protect, preserve and empower - to join us in this critical mission.

We're looking for team members who align with our values, mission and goals - while also meeting the minimum qualifications below. The preferred qualifications are a bonus, not a requirement.

Key Responsibilities

• Support the enterprise vulnerability management program across infrastructure, endpoints, applications, cloud environments, and network devices.
• Develop and maintain vulnerability scanning strategies, schedules, configurations, coverage metrics, and operating procedures.
• Analyze vulnerability scan results and threat intelligence to validate findings, assess exploitability and business impact, and prioritize remediation using a risk-based approach.
• Coordinate with infrastructure, application, cloud, network, and business teams to assign, track, and verify remediation activities within established service-level targets.
• Provide technical guidance on remediation options, compensating controls, exception requests, and risk acceptance decisions.
• Monitor vulnerability management dashboards, trends, and key performance indicators; prepare clear executive and technical reports on exposure, remediation progress, and residual risk.
• Investigate discrepancies in scan coverage, vulnerability data, and remediation status to improve the accuracy and completeness of enterprise reporting.
• Integrate vulnerability management processes and data with asset management, configuration management, ticketing, SIEM, GRC, and other security platforms.
• Support vulnerability assessments, penetration testing, compliance assessments, and audits by providing evidence, technical analysis, and remediation status.
• Develop scripts, workflows, and other automation to improve scanning, data analysis, ticket creation, reporting, and remediation verification.
• Stay current on emerging vulnerabilities, exploitation trends, security advisories and defensive technologies, and communicate relevant risks and recommended actions to stakeholders.

Minimum Qualifications

• Requires Bachelor's degree in a related field (or equivalent work experience in lieu of degree or Masters +3 years experience).
• Typical 5+ years of related experience.
• Certifications: (1 or more required) GIAC (Global Information Assurance Certification), network technology certifications such as a CCNP (Cisco Certified Network Professional), or SANS level 300 courses.
• Knowledge of one or more: emerging technologies, emerging threats, emerging regulatory requirements.
• Knowledge of secure systems architecture.

Preferred Qualifications

• Ability to obtain and maintain a U.S. security clearance
• Hands-on experience operating or engineering an enterprise vulnerability management program across diverse technology environments.
• Hands-on experience with vulnerability assessment and management platforms such as Tenable, Qualys, Rapid7, or equivalent tools.
• Experience developing risk-based vulnerability prioritization methods using severity, exploitability, asset criticality, threat intelligence, and business impact.
• Experience coordinating remediation across infrastructure, endpoint, application, cloud, network, and third-par