Senior Security Risk Analyst, Muon Space

• The ideal candidate brings deep expertise across multiple security domains and can operate independently to protect Muon’s infrastructure, data, and people
• 5+ years in information security, security engineering, or security risk/GRC roles
• Hands-on experience running security risk assessments and managing a risk register
• Strong understanding of security risk frameworks and methodologies (e.g., NIST RMF / 800-30, FAIR, or similar)
• Familiarity with compliance frameworks such as NIST 800-171, CMMC, SOC 2, or ISO 27001
• Excellent written and verbal communication skills — able to convey risk and priorities to both engineers and leadership
• We encourage you to apply, even if you don't check all the boxes, and we look forward to reviewing your application! In addition, if you need a reasonable accommodation as part of your application for employment or interviews with us, please let us know
• This position requires access to export controlled information. To conform to U.S. Government export regulations applicable to that information, applicant must either be (A) a U.S. person, defined as a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (green card holder), (iii) refugee under 8 U.S.C. § 1157, or (iv) asylee under 8 U.S.C. § 1158, (B) eligible to access the export controlled information without a required export authorization, or (C) eligible and reasonably likely to obtain the required export authorization from the applicable U.S. government agency

Desirable

• Muon seeks a Senior Security Risk Engineer to join our Security Engineering & IT team
• You will focus on security risk — identifying, assessing, and helping address risks across our environment and every company function, from engineering and IT to operations, finance, and the supply chain
• You will run risk assessments, prioritize what matters most, drive remediation with the teams that own it, and give leadership a clear, current picture of Muon's risk posture, including compliance efforts such as NIST 800-171 and ITAR/EAR
• Lead security risk assessments across the company — identify, analyze, and prioritize risks across engineering, IT, operations, and business functions
• Maintain a risk register and a clear, current view of Muon's risk posture for leadership
• Partner with teams across the company to drive remediation of identified risks and track them to closure
• Assess the security risk of new tools, vendors, third parties, and architectural or process changes before adoption
• Define and apply a consistent risk framework and methodology — likelihood and impact scoring, risk acceptance, and exceptions
• Map risks and controls to compliance requirements such as NIST 800-171 and CMMC, and support audits and assessments
• Report risk trends and metrics to leadership and recommend where to invest to reduce the most risk
• Help teams build risk-aware processes and take ownership of the risks they hold