{"id":1014294,"url":"https://alion.io/job/apex-group-mission-security-engineer","title":"Mission Security Engineer","company":{"id":8851,"name":"Apex","domain":"apexspace.com","url":"https://alion.io/company/apex","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":78,"open_postings":29,"ghost_share":0,"stale_share":0.897,"repost_share":0,"time_to_fill_p50_days":46,"computed_at":"2026-11-05T05:54:30Z"}},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Los Angeles, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":162000,"max":198000,"currency":"USD","period":"year","gross":null,"usd_annual":198000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Least Privilege","optional":false},{"name":"CCSDS","optional":true},{"name":"CI/CD","optional":true},{"name":"Git","optional":true},{"name":"Python","optional":true},{"name":"Threat Modeling","optional":true}],"status":"live","first_seen_at":"2026-09-17T20:56:48Z","employer_posted_date":"2026-10-02","last_verified_at":"2026-11-05T15:21:37Z","board_verified":true,"closed_at":null,"days_open":48,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":48},"description":"Spacecraft represent the most pressing unmet need across the entire aerospace industry. As more launch vehicles come online and the cost to orbit decreases, more companies launching payloads to space continue to emerge.\nFor the first time in history, this influx of payload companies combined with reduced launch costs has resulted in a massive increase in need for commercial spacecraft platforms, known as satellite buses. These buses hold the payloads of our customers and are flown on launch vehicles.\nApex manufactures these satellite buses at scale using a combination of software, vertical integration, and hardware that is designed for manufacturing. Our spacecraft enable the future of society: ranging from earth observation to communications and more.\nWe’d love for you to join us on our mission of providing humankind access to the galaxy beyond our planet.\nAbout the Role\nIn this position, you will own or contribute to the authorization posture of two systems: a space vehicle and a classified cloud mission operations environment. You will contribute to cyber engineering and produce RMF authorization documentation, build and sustain authorization packages, own the plan of action and milestones day to day, and run continuous monitoring. This is mission systems work throughout, not traditional enterprise IT security.\nWe are open to candidates from ISSE, SSE, ISSM, or ISSO backgrounds, and are hiring across levels: from new and recent graduates through senior engineering, officer, and manager experience.\nResponsibilities:\n May include any or all of the following:\nAuthorization Ownership\nBuild and sustain authorization packages for both boundaries: system description, boundary definition, categorization, control selection and tailoring rationale, implementation statements, assessment coordination, and the residual risk picture carried to the AO.\n\nGet assessors engaged early on our evidence-generation approach so generated artifacts are trusted before a package depends on them.\n\nOwn the POA&M.\n\nMaintain the authorization system of record (eMASS or equivalent).\n\nSpace Vehicle Segment\nOwn the authorization boundary determination for the flight segment and the rationale that survives assessor scrutiny.\n\nCategorize under CNSSI 1253 and defend overlay selection, treating the Space Platform Overlay as the starting place it is rather than a finished answer - pushing back where our onboard security capability exceeds what the published tailoring assumes.\n\nTailor the control baseline with per-control rationale, using Aerospace's Space Segment Cybersecurity Profile (TOR-2023-02161 Rev A) and SPARTA-linked tailoring, including arguing controls back in where our onboard capability exceeds what those baselines assumed.\n\nDefine the type-authorization for the bus and design how each vehicle off the line generates its own conformance evidence so fleet growth does not mean linear growth in assessment labor.\n\nDerive verifiable security requirements from threat using SPARTA TTPs as the traceability key, owned by the software and mission integration engineers who will build and test against them.\n\nTranslate verification and production artifacts into assessment evidence and tell engineering early when what they produce will not satisfy an assessor.\n\nOwn the continuous monitoring story for a fielded fleet: security audit downlinked across contact windows, configuration drift across vehicles, and on-orbit software update as a recurring authorization event.\n\nClassified Cloud Mission Operations Environment\nDefine and document the authorization boundary for mission systems in classified cloud (AWS, Azure classified regions, or equivalent), including impact-level scoping and the seam with ground stations and the RF edge.\n\nOwn the control and evidence story for operator command authority: identity, role separation, least privilege, two-person integrity, non-repudiation, and complete audit of every command that reaches the vehicle.\n\nBuild and defend the control inheritance model and prove the customer-responsible set with live evidence rather than assertion, validating what the cloud service provider and the platform satisfy versus what remains customer responsibility for the mission-unique applications.\n\nImplement controls as code, so infrastructure-as-code, policy-as-code, and pipeline configuration serve as the implementation and the evidence at once.\n\nMake change control and continuous monitoring work at operations tempo, never putting a contact window at risk, positioned for the DoD transition toward the Cybersecurity Risk Management Construct (CSRMC) and continuous authorization.\n\nManage security incident reporting and coordination for the boundary.\n\nAutomation and Generation\nDefine what evidence you need and in what form.\n\nDesign the OSCAL-based evidence data model and the mapping layer that resolves a property assertion to control identifiers across 800-53, CNSSI 1253 baselines, overlays, and program-unique control sets.\n\nBuild the pipeline that renders SSP sections, assessment evidence, POA&M items, and continuous monitoring reports deterministically from pinned evidence snapshots.\n\nIntegrate with the authorization system of record (eMASS or equivalent) programmatically, so generated artifacts land where assessors actually look.\n\nUse AI-assisted drafting and crosswalk tooling for control narratives, framework mappings, and monitoring summaries, with human review on anything an AO reads and full traceability from every statement to a source record.\n\nPush toward controls whose satisfaction is demonstrated by system state rather than by narrative.\n\nRequired Qualifications\nAt Every Level\nU.S. Citizenship (must possess the ability to access export-controlled data)\n\nActive Top Secret clearance with SCI access and SAP eligibility strongly preferred\n\nExperience with technical tooling: reading pipeline output, querying an API, interpreting scanner and configuration state\n\nEntry Level (1-3+ Years)\nBachelor's, master's, or PhD in systems engineering, computer science, cybersecurity, aerospace, or a related field\n\nClear experience with hands-on building via coursework, internships, research code, personal projects, CTFs, a co-op, or an early role and/or some exposure to RMF, security compliance, cloud, or software engineering\n\nWillingness to learn RMF from the ground up, with a demonstrated ability to pick up a complicated technical domain quickly and hold a lot of detail without losing the thread\n\nSenior Level (5-10+ Years)\nStrong experience in embedded/space systems or cloud infrastructure\n\nMultiple systems taken to authorization in national security or DoD environments, with fluency in RMF as practiced: categorization under CNSSI 1253, overlay selection, tailoring rationale, assessment coordination, POA&M management, continuous monitoring, and reauthorization triggers\n\nAbility to speak concretely about categorization, tailoring, assessment, and authorization, and to design, document, or test a report and determine whether it constitutes evidence that a control is satisfied\n\nDirect experience with at least one accredited cloud environment and one non-traditional system such as embedded, weapons, platform IT, industrial, or space\n\nPreferred Qualifications\nExperience with OSCAL, eMASS APIs, Xacta, controls-as-code, or continuous-controls-monitoring implementation\n\nSkilled in Python, Go, or equivalent, in CI/CD, infrastructure-as-code, and Git-based workflows\n\nExperience with continuous authorization, ongoing authorization, or cATO\n\nExperience building with AI-assisted development\n\nUnderstanding of Mission Operations including satellite command and control, mission planning, flight dynamics, telemetry processing, or multi-mission ground segments\n\nEmbedded or safety-critical background in space, automotive, or industrial control\n\nExperience with SPARTA, NIST IR 8270 or IR 8401, CCSDS security standards, Space Platform Overlay, NASA/Space Force system protection standards, or space-system threat modeling\n\nExperience with classified cloud accreditation at IL5/IL6 or IC equivalents, or accreditation under JSIG or ICD 703\n\nQualified, or able to qualify, under DoDM 8140.03 for a systems security engineering, security architecture, or Information Systems Security Manager work role. CISSP, CISSP-ISSEP, CISM, and SecurityX map well.\n\nWhy Join Apex?\nApex believes in creating a work environment that you look forward to embracing every day. Our employees love working at Apex, and we want you to love it too. We're a fast-growing startup that has raised more than $500M in funding, and we invest heavily in our people from day one.\nWhat We Offer For Full-time Employees:\nShared upside: Receive equity in Apex, letting you benefit from the work you create\n\nBest-in-class healthcare: 100% company-paid medical, dental, and vision for you and your dependents, plus $100k life insurance at no cost\n\nComprehensive PTO package: Starting at 15 days vacation, growing to 20+ days annually, plus 10 paid holidays\n\nCompetitive 401(k) plan: Generous matching - 100% match on first 3%, 50% on next 2%\n\n8 weeks paid parental leave: Plus childcare reimbursement up to $350/day for work-related travel\n\nDaily catered lunch and unlimited snacks: To keep you fueled throughout the day\n\nVibrant community: Monthly office socials, pickleball tournaments, run club, and gatherings for you and your family\n\nYour dream desk setup: All the tools you need to be your most productive self\n\nWorld-class Playa Vista office: With the benefit of in-person collaboration with amazing coworkers and flexibility to integrate work and life\n\nReal impact opportunity: Work alongside experts from aerospace, new space, and other cutting-edge industries to make a lasting difference\n\nAdditional Information:\nCompensation ranges are set by role, level, location, and alignment with market data. A candidate's specific level and base pay are determined case by case and may vary with job-related skills, education, experience, technical capabilities, and internal equity. Beyond base salary, full-time hires are also eligible for long-term incentives in the form of stock options, along with medical, dental, and vision coverage and a 401(k) retirement plan.\nITAR Requirements\nApex's work is governed by U.S. export control laws, including the International Traffic in Arms Regulations (ITAR) and the Export Administration Regulations (EAR). To be eligible for this role, applicants must either (1) qualify as a U.S. Person, meaning a U.S. citizen or national, a lawful permanent resident (green card holder), a refugee admitted under 8 U.S.C. § 1157, or an individual granted asylum under 8 U.S.C. § 1158, or (2) be able to obtain the required export authorizations from the U.S. Department of State, the U.S. Department of Commerce, or another applicable U.S. government agency. You can learn more about ITAR here.\nEqual Opportunity Employer\nApex Technology, Inc. is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. Candidates and employees are always evaluated based on merit, qualifications, and performance. We will never discriminate on the basis of race, color, gender, national origin, ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability, or any other legally protected status.","description_format":"text","description_chars":11418,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":["Equity","Life insurance","Parental leave","Retirement plans","Stock options"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Space & Aerospace","Penetration Testing","Satellite Manufacturing","Supply Chain"],"lifecycle":[{"event":"open","at":"2026-09-17T21:46:10Z"}],"visa":[],"liveness":{"score":24,"band":"cold","label":"Long shot","p_open":1,"p_active":0.545,"p_room":0.44,"age_days":48,"expected_fill_days":46,"reasons":["conf:1","stale_co","velocity","win:tail","crowd:junior,brand"],"computed_at":"2026-11-05T05:54:30Z"},"pay":{"stated_usd_annual":198000,"is_top_pay":true},"html_url":"https://alion.io/job/apex-group-mission-security-engineer","json_url":"https://alion.io/job/apex-group-mission-security-engineer.json","meta":{"generated_at":"2026-11-05T16:21:20Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":21466,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-06T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":8851},"rest":"https://alion.io/mcp/rest/get_company?id=8851"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fapex-group-mission-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fapex-group-mission-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fapex-group-mission-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/apex-group-mission-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fapex-group-mission-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":1014294}},{"tool":"search_jobs","arguments":{"company":"apexspace.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":1014294},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}