Chief Information Security Officer (CISO)

Ursa Major is seeking an executive technology leader to serve as our Chief Information Security Officer (CISO w/ clearance). Reporting to the executive leadership team, the CISO will establish enterprise-wide information security ownership across our multi-site engineering, manufacturing, and test facilities. Working in direct, strategic lockstep with our Facility Security Officer (FSO), who leads personnel clearances, physical security, and overall NISPOM facility compliance, the CISO serves as the ultimate authority for digital, technical, and operational cybersecurity.

We are not looking for an administrator who leads from behind a desk or relies on enterprise bureaucracy. We need a builder who leads from the front-an executive with deep roots in Aerospace & Defense (A&D) who knows what mature security infrastructure looks like and possesses the hands-on drive to build, scale, and mature our systems from the ground up.

Sitting at the intersection of defense compliance, manufacturing velocity, and enterprise IT, you will own the overarching risk management strategy for both unclassified and classified programs. You will champion our hybrid CMMC Level 2 enclave expansion, govern the technical architecture of classified defense enclaves (Secret / SAP), protect critical Intellectual Property, and establish the cyber risk governance required for a high-growth defense firm preparing for public-company operations.

Responsibilities:

• Define and execute Ursa Major’s enterprise cybersecurity and information assurance strategy across all corporate, manufacturing, engineering, and classified program environments.
• Lead from the front to build, mentor, and inspire a world-class cybersecurity engineering and compliance team, fostering a culture of operational enablement, technical rigor, and deep cross-functional partnership.
• Direct the continuous advancement and accreditation of our CMMC Level 2 / NIST SP 800-171 architecture, ensuring Controlled Unclassified Information (CUI) and defense technical data flow securely across multi-site operations without impeding engineering velocity.
• In close partnership with the FSO and program security, lead the digital architecture, technical authorization packages, and continuous monitoring of classified information systems (Secret, Top Secret, and Special Access Programs) in strict alignment with RMF, JSIG, NIST SP 800-53, and DCSA standards.
• Establish an enterprise cyber risk register, translating technical vulnerabilities into clear operational and business risk metrics for executive leadership and the Board of Directors.
• Partner closely with IT, DevOps, and Digital Manufacturing to embed Zero Trust network segmentation, identity governance (Entra ID), and robust endpoint detection into physical shop floors, test stands, and cloud environments.
• Establish a collaborative, locked-in operating rhythm with the FSO and physical security teams to unify technical cyber defenses with physical enclave controls, COMSEC, and cleared personnel governance.
• Serve as the executive authority for technical and cyber assessments, partnering with the FSO on DCSA security reviews, customer audits, DCMA evaluations, and third-party CMMC assessments (C3PAO).
• Build public-company-grade cybersecurity governance, including incident response playbooks, third-party vendor risk management (TPRM), SEC disclosure readiness, and SOX IT General Controls (ITGC).
• Act as the senior escalation authority for incident handling, crisis communications, threat intelligence integration, and technical remediation., Must be a U.S. Person (this includes U.S. Citizens and Permanent Residents). Eligibility to obtain and maintain a U.S. Security Clearance. We’re an equal-opportunity employer. You will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran, or disability status. No outside recruiters, please., Systems Engineering Intern supporting solid rocket motor design, development, manufacturing, and testing. Responsibilities include developing requirements, planning verification and validation, maintaining traceability, conducting reliability and failure-mode analyses, mitigating risks, modeling subsystem data flows, and improving engineering processes and tools. The role collaborates across disciplines and requires initiative, communication skills, and familiarity with systems engineering principles. Experience with solid rocket motors, MBSE, DOORS, or Jama is preferred. Top Skills: DoorsJamaModel-Based Systems Engineering (Mbse) Ursa Major

Manufacturing Engineer

Yesterday In-Office Berthoud, CO, USA 30-30 Hourly Internship 30-30 Hourly Internship Aerospace * Defense Supports analysis, design, and optimization of aerospace manufacturing processes to improve safety, quality, productivity, capacity, and cost. Responsibilities include factory and line simulation, capacity modeling, production scenario analysis, CAD plant layout updates, standard work documentation, data collection, work instruction updates, and tooling or fixture design. The intern collaborates with shop-floor, planning, engineering, and manufacturing teams. Top Skills: CadFactory Simulation SoftwareLine Simulation SoftwareExcelMicrosoft Word Ursa Major

Executive Assistant

Yesterday In-Office Berthoud, CO, USA 82K-102K Annually Mid level 82K-102K Annually Mid level Aerospace * Defense Provides dedicated administrative and operational support to the President, including complex calendar management, domestic and international travel coordination, communications, meeting preparation, events, and confidential information handling. Coordinates with executive operations and administrative teams to align schedules, logistics, facilities, visitors, and leadership activities. Requires strong organization, judgment, discretion, communication skills, and proficiency with Microsoft 365 and Adobe Acrobat. Top Skills: Adobe AcrobatEnvoyExcelMicrosoft 365NavanOutlookPowerPointTeamsWord

What you need to know about the Colorado Tech Scene

With a business-friendly climate and research universities like CU Boulder and Colorado State, Colorado has made a name for itself as a startup ecosystem. The state boasts a skilled workforce and high quality of life thanks to its affordable housing, vibrant cultural scene and unparalleled opportunities for outdoor recreation. Colorado is also home to the National Renewable Energy Laboratory, helping cement its status as a hub for renewable energy innovation.

Key Facts About Colorado Tech

• Number of Tech Workers: 260,000; 8.5% of overall workforce (2024 CompTIA survey)
• Major Tech Employers: Lockheed Martin, Century Link, Comcast, BAE Systems, Level 3
• Key Industries: Software, artificial intelligence, aerospace, e-commerce, fintech, healthtech
• Funding Landscape: $4.9 billion in VC funding in 2024 (Pitchbook)
• Notable Investors: Access Venture Partners, Ridgeline Ventures, Techstars, Blackhorn Ventures
• Research Centers and Universities: Colorado School of Mines, University of Colorado Boulder, University of Denver, Colorado State University, Mesa Laboratory, Space Science Institute, National Center for Atmospheric Research, National Renewable Energy Laboratory, Gottlieb Institute

• 12+ years of progressive experience in cybersecurity, information assurance, and secure systems architecture, with at least 5+ years in senior leadership or technical management roles within the Aerospace & Defense (A&D) sector.
• Active U.S. Government Security Clearance (Top Secret required, with active or recent SCI/SAP eligibility preferred).
• Demonstrated track record of partnering successfully with Facility Security Officers (FSOs), government Authorizing Officials (AOs), and program leadership to secure facility authorizations and system ATOs.
• Deep technical and regulatory mastery of federal security standards, including NIST SP 800-171, CMMC Level 2, NIST SP 800-53, Risk Management Framework (RMF), JSIG, and NISPOM.
• Demonstrated ability to lead hands-on technical initiatives, conduct rigorous architectural reviews with engineering teams, and articulate strategic risk and vision to executive leadership and government customers.
• Experience managing enterprise-wide incident response, endpoint detection (EDR), identity federation, and Zero Trust micro-segmentation in hybrid IT/OT manufacturing environments.
• Current industry certification: CISSP, CISM, or equivalent executive-level security credential., * Active TS/SCI with current SAP/SAR access.
• Experience leading an organization through a successful DCSA security inspection or C3PAO CMMC Level 2 assessment.
• Practical familiarity with public-company readiness, including SOX compliance, cyber risk disclosures, and enterprise business continuity planning.
• Master’s degree in Cybersecurity, Computer Science, Information Assurance, or related field.

Colorado law requires us to tell you the base compensation range of this role, which is $240,000 - $300,000, determined by your education, experience, knowledge, skills, and abilities. What we can’t quantify for you are the exciting challenges, supportive team, and amazing culture we enjoy.

Classification: Full-time Exempt

Benefits Include: (Please note, Interns are not eligible for benefits)

• Unlimited PTO - Vacation, Sick, Personal, and Bereavement
• Paid Parental and Adoptive Leave
• Medical, Dental and Vision Insurance
• Tax Advantage Accounts (HSA/FSA)
• Employer Paid Short and Long Term Disability, Basic Life, AD&D
• Additional Benefit Options Including Voluntary Life and Emergency Medical Transport
• EAP Program
• Retirement Savings Plan - 401k with Company Match, In-Office Berthoud, CO, USA 30-30 Hourly Internship 30-30 Hourly Internship

The CISO will lead enterprise cybersecurity across corporate, manufacturing, engineering, and classified defense environments. Responsibilities include building security teams, advancing CMMC and NIST architectures, governing Secret/Top Secret/SAP systems, managing cyber risk, implementing Zero Trust and endpoint security, coordinating with FSOs and government officials, overseeing audits and assessments, and leading incident response, vendor risk, SEC disclosure readiness, and SOX IT controls. The summary above was generated by AI

The future of aerospace and defense starts here.

Ursa Major was founded to revolutionize how America and its allies access and apply high-performance propulsion, from hypersonics to solid rocket motors, satellite maneuvering and launch. We design and deliver propulsion and defense systems that solve the most urgent and critical national security demands.

Our mission requires an extraordinary team, specifically one that will mold tomorrow’s critical technologies while deploying today’s best. We are an intrinsically motivated organization with a passion for solving complex technical problems and empowering each other every day, knowing that there is always room for growth.