Information Assurance Engineer I

About this role

Vast is developing next-generation space stations and space infrastructure using an incremental, hardware-rich, and low-cost approach. Vast is rapidly developing its multi-module Haven Station to ensure a continuous human presence in space for America and its allies, enabling advanced microgravity research and manufacturing, and unlocking a new space economy for government, corporate, and private customers. Haven Demo’s 2025 success made Vast the only operational commercial space station company to fly and operate its own spacecraft. Next, Haven-1 is expected to become the world’s first commercial space station when it launches in 2027, followed by additional Haven modules. Additionally, the company recently announced Vast Satellite , a high-power satellite product line leveraging its space station components and the heritage of Haven Demo.

Headquartered in Long Beach, California , and with more than 1,000 employees and over a billion dollars in private capital, Vast has built the facilities required to manufacture and operate America’s next space station. The company plans to develop future habitats and systems for the Moon and Mars, dedicated space stations for government partners, and other crewed systems that will unlock the expanding long-term space economy.

Vast is looking for an Information Assurance Engineer I , reporting to the Information Security Manager , to assist in the deployment and maintenance of the organization's growing information security compliance program. The Information Assurance Engineer I supports the development of security policies and procedures, ensuring compliance with pertinent regulations and security standards (i.e. NIST SP 800-171 Rev 2, NIST 800-53 Rev 5).

This will be a full-time , exempt position located in our Long Beach location.

Responsibilities:

• Support compliance documentation and evidence collection activities for NIST SP 800-171, NIST SP 800-53, CMMC 2.0, and applicable ITAR/EAR requirements across corporate and mission environments

• Assist with the implementation, validation, and continuous monitoring of security controls and compliance requirements

• Support automated compliance workflows, including evidence collection, policy checks, control validation, and audit preparation

• Assist in maintaining integrations between security tools such as EDR, SIEM, vulnerability scanners, and asset inventory platforms and compliance/ticketing systems

• Utilize approved AI and LLM/machine learning tools to support security analysis, documentation review, evidence organization, and identification of potential compliance gaps

• Help create and maintain compliance dashboards, metrics, and automated reports to track security and compliance posture

• Support risk assessments, change management activities, remediation tracking, and internal and external security assessments

• Monitor security systems, networks, and applications for compliance issues and assist with identifying and addressing compliance drift

• Partner with Information Security Engineering and other technical teams to support the implementation and validation of security controls

• Assist with maintaining compliance records, policies, procedures, and system security documentation

• Participate in security and compliance audits, assessments, and readiness activities

• Provide information security and compliance-related support and training as required of work

Minimum Qualifications:

• 1+ years of experience supporting information security, compliance, risk management, or cybersecurity efforts in the Defense Industrial Base, aerospace/space industry, or a similar regulated environment

• Familiarity with security standards and frameworks such as NIST SP 800-53, NIST SP 800-171, NIST CSF, or CMMC

• Basic understanding of cloud security and compliance concepts in AWS, Google Cloud Platform (GCP), Azure, or similar environments

• Experience supporting security control monitoring, documentation, evidence collection, and remediation activities

• Experience supporting security assessments, gap assessments, self-assessments, or compliance audits

• Familiarity with security tools such as SIEM, IDS/IPS, EDR, vulnerability scanners, and asset management platforms

• Basic understanding of APIs and how security tools and platforms can be integrated or automated

• Familiarity with workflow automation, orchestration, or scripting tools such as n8n, Tines, SOAR platforms, Python, PowerShell, or similar technologies

• Working knowledge of Controlled Unclassified Information (CUI) protection requirements and security controls applicable to Defense Industrial Base environments

• Strong documentation, organization, communication, and problem-solving skills

Preferred Skills & Experience:

• Possess an active certification listed under DoD 8140 IAM Level I/II and/or IAT Level I/II, such as Security+ CE, SSCP, or similar

• Experience using AI/LLM tools to support security analysis, documentation, research, or compliance activities

• Exposure to automated evidence collection or continuous compliance monitoring

• Familiarity with infrastructure-as-code or configuration management tools such as Terraform, Ansible, or similar

• Basic scripting experience with Python, PowerShell, Bash, or similar languages

• Exposure to MCP (Model Context Protocol) or other AI integration patterns for security tooling

• Experience working with GRC, ticketing, compliance, or security workflow platforms

• Ability to work effectively in a fast-paced, rapidly growing environment and collaborate with engineering, IT, security, and program teams

Additional Requirements:

• Ability to travel up to 10% of the time

• Willingness to work overtime, or weekends to support critical mission milestones

• Ability to lift up to 25lbs unassisted

• Specific certifications, as appropriate

Pay Range: Information Assurance Engineer I: $98,400.00 - $144,000.00 Pay Range: California $98,400 — $144,000 USD

COMPENS

Similar jobs

• Sr Information Assurance Engineer — Intrepid Global Solutions · Wiesbaden, Germany | McLean, VA
• Information Assurance Specialist - I (Information Security Analyst) — Barbaricum · Indianapolis, Indiana, United States
• Security Engineer I, Information Technology — Cision · Remote
• Information Security Engineer — Dealertire · Remote
• Information Security Engineer — SCAN · Long Beach Office 3800
• Information Security Engineer — Palantir · Washington, D.C.
• Information Security Engineer — Palantir · Seattle, WA
• Information Security Engineer — Palantir · New York, NY