Industrial Security Team Lead​/Senior Facility Security Officer; FSO

Who We Are: Galois tackles the hardest problems in computer science. Our mission is to assure trust in critical systems that protect the privacy and integrity of information in the real world. From building digital engineering tools that make space exploration safer to verifying cryptographic libraries that protect some of the world’s most valuable data, Galois develops technology to guarantee the trustworthiness of systems where failure is unacceptable.

What We Do: We believe trustworthy systems are built on a formal mathematical foundation. Our researchers apply formal analysis techniques to the design and verification of critical software systems, allowing us to model, analyze, and mathematically prove that a system behaves exactly as intended under all circumstances. With clients including DARPA, NASA, AWS, and the DoD / DoW, we leverage our cutting‑edge research to deliver high assurance solutions and tools that enhance security, reliability, and operational efficiency across sectors including aerospace & defense, healthcare, semiconductors, and fintech.

Life at Galois: People are the foundation of Galois’s success. As an employee‑owned company, we care not only about the technologies we develop, but also the path we take to create them. Galois operates under a highly collaborative organizational model that encourages leadership and teamwork and respects the individuals.

For more on our culture and organizational structure, visit Life at Galois.

The Industrial Security Team Lead/Senior Facility Security Officer (FSO) is responsible for further developing and maintaining Galois’ industrial security program and ensuring company and customer security requirements are met. The successful candidate will lead a team of security professionals across Galois locations and interface with all levels of Galois personnel and government management personnel to ensure contract security compliance with National Industrial Security Operating Manual (NISPOM), Contract Security Classification Specifications (DD254) and Program Classification Guides.

The position requires a self‑motivated candidate that is capable of leading a distributed team of other security professionals as well as working independently with minimal direction. The FSO must possess the confidence to make critical security decisions concerning high value contracts and to implement security procedures that will prevent unauthorized access to company and government facilities or information. The candidate will be required to conduct security self‑inspections, apply risk mitigation methodologies, support customer assessments, and implement security measures to meet requirements.

• Report directly to Galois’ General Counsel and other senior level executives on security matters across the organization
• Lead and collaborate with other Galois’ FSOs to establish and maintain facility and information security requirements across all Galois facilities.
• Provide oversight and direction to other Galois functional areas on security related matters.
• Manage and maintain compliance with the industrial security program for Galois’ Arlington, VA facility in accordance with the NISPOM as well as other secure areas and facilities (Open Storage Spaces (OSS)), as needed including preparing and maintaining accreditation documentation for each (e.g. UL certifications, open storage area approval checklists, and mitigation plans).
• Use 32 CFR 2001.53 and other technical specifications to design new secure spaces or develop modifications and construction security plans for secure areas based on their accreditation status and Sponsor requirements as needed.
• Account for, control, transmit, package and safeguard COMSEC information and administer periodic software and cryptographic key updates.
• Support IT staff in maintaining appropriate accreditation documentation for all information systems within Galois secure areas and address any shortcomings.
• Implement OPSEC plans as needed.
• Conduct security self‑inspections, apply risk mitigation methodologies, support customer assessments, and implement security measures to meet emerging requirements.
• Conduct…