Firefly Aerospace engages in providing economical and convenient access to space for small payloads through the design, manufacture, and operation of reliable launch vehicles. Backed by Space Capital.
About the role
As the Information Systems Security Manager at Firefly Aerospace, you will serve as the primary authority for ensuring mission-critical space systems and enterprise information systems achieve and maintain authorization to operate in compliance with national security requirements. You will own the Risk Management Framework (RMF) accreditation lifecycle per NIST SP 800-37 Rev. 2, implementing CNSSP-12 and CNSSI 53 requirements across space vehicle platforms, ground systems, and supporting infrastructure. Found on 1752vc Careers, the job board for startup and VC roles.
What they're looking for
- Lead security categorization activities per CNSSI 53, determining appropriate Impact Levels (IL) and establishing control overlays for all national security systems
- Develop and maintain system security architecture documentation, including data flow diagrams, security boundary definitions, and control inheritance mappings
- Coordinate with system owners and engineering teams to identify security control implementation requirements and validate that technical solutions meet policy mandates
- Conduct security impact assessments, threat modeling, and risk assessments on proposed architectures, system changes, and configuration updates
- Review and approve technical security requirements in system specifications, interface control documents (ICDs), and engineering design documentation
- Manage end-to-end RMF processes per NIST SP 800-37 Rev. 2 for multiple concurrent systems to achieve and maintain Authorities to Operate (ATOs)
More about this role
SUMMARY
As the Information Systems Security Manager at Firefly Aerospace, you will serve as the primary authority for ensuring mission-critical space systems and enterprise information systems achieve and maintain authorization to operate in compliance with national security requirements. You will own the Risk Management Framework (RMF) accreditation lifecycle per NIST SP 800-37 Rev. 2, implementing CNSSP-12 and CNSSI 53 requirements across space vehicle platforms, ground systems, and supporting infrastructure. Serving as the primary liaison between system owners, engineering teams, and Government Authorizing Officials (AOs), you will translate security policy into system requirements, manage security authorization packages, and ensure continuous monitoring of security controls. You will report directly to the Director of Cybersecurity and work closely with systems engineering, DevOps, and mission operations teams.
This position will be based out of our corporate headquarters in Cedar Park, TX
RESPONSIBILITIES
National Security Systems Compliance: CNSSP-12 & CNSSI 53
- Serve as subject matter expert for CNSSP-12 and CNSSI 53 requirements, translating policy mandates into specific...
Browse similar: Startup jobs