Sr Cybersecurity SME; Cryptography & PQC)

Job Title:

Senior Cybersecurity SME (Cryptography & PQC)

Location:

Irving, TX

• We are seeking a Senior Cybersecurity Subject Matter Expert with deep domain knowledge in enterprise encryption, Post-Quantum Cryptography (PQC) readiness, and cryptographic vulnerability analysis.
• You will be the tip of the spear on a high-stakes AI-driven automation project.
• Working securely on-site, you will analyze massive datasets of Cryptography Bill of Materials (CBOM) to identify vulnerability patterns across hundreds of legacy and modern applications.
• You will serve as the critical intelligence bridge, translating raw security gaps into actionable technical patterns that our offsite AI engineering teams will use to build automated remediation agents.

• Senior-Level Expertise:
  Extensive, hands‑on background in Cybersecurity, Cryptography, and Security Data Analysis.
• Deep Cryptographic Knowledge:
  Absolute technical mastery of enterprise encryption protocols, including TLS 1.3, IKEv2 IPsec, AES‑256, and modern PQC concepts (e.g., ML‑KEM, ML‑DSA).
• Data Parsing
  
  Skills:
  
  High proficiency in parsing, querying, and analyzing raw security data logs (JSON, SBOM, CBOM formats) to extract actionable trends.
• Legacy Infrastructure Acumen:
  Ability to understand and navigate the constraints of 10‑to‑20‑year‑old revenue‑generating enterprise applications and hardware.
• Security Clearance/Compliance:
  Must be eligible and willing to clear expedited enterprise security onboarding and work on‑site under strict, zero‑data‑export handling protocols

• Analyze Complex Security Data:
  Securely parse and analyze raw JSON/SBOM/CBOM scans (generated by tools like Sonatype and CBOM Kit) across an enterprise portfolio of ~128 applications.
• Map Cryptographic Vulnerabilities:
  Identify critical deviations from target North Star standards, specifically mapping migrations from TLS 1.0/1.2 to TLS 1.3, weak ciphers to AES‑256‑GCM, and outdated SSH host keys to modern standards.
• Identify Ecosystem Patterns:
  Group applications by their infrastructure characteristics and vulnerability signatures, factoring in complex constraints like hardware load balancers, IoT device memory limits, and legacy undocumented business rules.
• Architect Characteristic Maps:
  Build comprehensive, sanitized technical mapping tables that define exactly what remediation templates need to be built by the offshore Cloud/AI team, ensuring zero proprietary vulnerability data leaves the secure network.
• Drive PQC Readiness:
  Guide the structural transition logic for Post‑Quantum Cryptography (PQC) readiness, focusing on hybrid TLS implementations and modern key management.