Requisition ID:
****
Standard Weekly Hours:
*****
Location:
ULA - Denver
Relocation:
Yes- Relocation may be available
Travel Requirements:
10%
At ULA, success comes through the efforts of a strong, united team.
Thanks for your interest in United Launch Alliance, the world's most experienced and reliable space launch company! Successfully launching more than 155 consecutive missions with 100% mission success doesn't happen by accident. It's a testament to the commitment and dedication of our team of rocket scientists and support employees combined with the systems and processes we use to pull them together. As a ULA employee, you'll have the opportunity to grow in your career while working in a team-oriented culture that combines technology, innovation, ingenuity and a commitment to the extraordinary. Whether you are in college just launching your career, or, have experience and want to come work with the best rocket team in the world, our unshakable unity yields stronger solutions and better results as we carry out our mission to save lives, explore the universe, and connect the world. Our team is excited to meet you!
Job Overview & Responsibilities
Overview
ULA is seeking a mid-level Information System Security Officer (ISSO) to provide comprehensive Risk Management Framework (
RMF)/
Authority to Operate
(ATO)
support and day-to-day Information Assurance (IA) for classified systems supporting Aerospace & Defense programs. In this role, you'll steward system cybersecurity across its lifecycle—leading control implementation, continuous monitoring, POA&M; management, and audit/readiness activities to achieve and maintain Authority to Operate (ATO) under DoD and IC policies. You'll collaborate with program management, program engineering, IT ops, security leadership and program customers to ensure mission systems meet stringent confidentiality, integrity, and availability requirements.
Responsibilities:
RMF / ATO Support
Execute and document all RMF activities across the full lifecycle in accordance with DoDI *******, NIST SP *****, CNSSI ****, JSIG/ICD 503, and customer? specific? guidance.
Develop and maintain RMF artifacts including the SSP, SAP/SAR, POA&Ms;, Contingency Plans, IR Plans, and related IA documentation.
Support ATO package preparation and submission using government customer RMF/IA tools for evidence upload, workflow tracking, and assessor interactions.
Implement, assess, and validate security controls; support control tailoring and inheritance strategies.
Continuous Monitoring & Compliance
Perform continuous monitoring using government approved? compliance scanning tools:
Vulnerability scanning tools
STIG/SRG-based configuration validation
Automated compliance assessments
Maintain system baselines,



secure configurations, asset inventories, and IA-related change documentation.
Support audit readiness and assist with customer inspections, CCRI-type events, and periodic cybersecurity evaluations.
Track, manage, and drive closure of POA&Ms; and risk items.
Secure Operations & Incident Response
Provide day-to-day IA support for classified systems, including boundary analysis, system configuration reviews, and data handling oversight.
Support event detection and response activities using government customer log aggregation tools, ensuring accurate log capture, retention, and reporting.
Participate in incident response coordination with Contractor Program Security Officer
(CPSO)
in accordance with customer and organizational procedures.
Guide engineering and operations teams on secure design principles, system changes, and cybersecurity impacts.
Governance, Risk & Compliance
Maintain risk tracking, document deviations and mitigations, and communicate system risk posture to IA leadership and stakeholders.
Support policy compliance, user training, secure handling, insider threat awareness, and governance activities.
Coordinate with AOs, SCAs, customer cybersecurity offices, and program security personnel.
Required Education
Bachelor
Required Years of Experience
Minimum of 4 years of related work experience
Basic Qualifications
Active TS/SCI with CI Poly and ability to maintain eligibility. U.S. Citizenship required
Bachelor's degree in Cybersecurity, Computer Science, or related field; equivalent experience considered
Four years of directly related exempt work experience may be used to satisfy the bachelor's degree requirement
4+ years of IA/cybersecurity experience with 3+ years directly supporting RMF/ATO for DoD/IC systems
Current DoD ********* Tier II certification or higher
Hands-on experience with NIST SP ******, DoDI *******, CNSSI ****, JSIG/ICD 503, and STIG/SRG application
Proficiency in vulnerability and compliance tools: Tenable Nessus, SCAP, DISA STIG Viewer, log/monitoring, and familiarity with patch management
Experience developing and maintaining SSP, SAR/SAP, POA&M;, and RMF evidence; strong technical writing skills
Knowledge of network security, Windows/Linux hardening, virtualization, endpoint protection, identity & access management, encryption/key management, and secure configuration baselines




Preferred Qualifications
Additional cybersecurity certifications (CAP, CEH, GSEC, GSLC)
Experience supporting Defense and Intelligence Community programs
Familiarity with secure cloud and hybrid environments (e.g., DoD Cloud SRG, IL2–IL6, GovCloud, IC ITE)
Prior involvement in customer-led cybersecurity inspections or assessments
Summary Salary Range (for ULA - Denver
only):
$104,****** - $173,******
Please note that the salary information shown above is a general guideline only. Salaries are based upon a candidate's experience and qualifications, as well as internal equity, market and business considerations. Employees may be eligible for a discretionary annual bonus in addition to base pay.
What makes ULA different?
Because we understand launch success comes through the collective efforts of a team, we seek the best to join us. We value ethics, ingenuity, engagement and professional development for employees at all levels.
We offer our employees competitive pay and benefits including:
401(k) match plus an additional employer contribution
Discretionary annual incentive premio for eligible employees
Generous paid time off
Flexible work environments
Additionally, most salaried ULA team members work a "9/80 schedule," meaning they enjoy every other Friday off.
Benefits and work schedules may vary for union-represented hourly positions and are described in the applicable collective bargaining agreement.
The application period for the job is estimated to be 20 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates.
Security Clearance / International Traffic In Arms Regulations (ITAR).
This position requires use of information which is subject to the International Traffic In Arms Regulations (ITAR). Therefore, all applicants must be U.S. Persons as defined in ITAR 22 CFR ****** (e.g., U.S. Citizen, Lawful Permanent Resident (Green Card holder) or protected individual. See 8 U.S.C. ****(a)(20) and 8 U.S.C. ****b(a)(3) for additional information).
ULA is an Equal Opportunity Employer.
All qualified applicants will receive consideration for employment.
ULA is a participant in the federal E-Verify Program.
Posters in PDF format pertaining to this program can be accessed by clicking on the links identified below. E-Verify Participation poster (
English
/
Spanish
) and Right to Work Poster (
English
/
Spanish
).
Colorado Equal Pay for Equal Work Act
requires covered employees to follow a post selection notification process. A hired candidate may opt out of this process by notifying the hiring manager in writing at the time the offer is accepted

📌 Information Systems Security Officer (Isso) Mid-Level (Italia)
🏢 ULA
📍 Italia