Senior Manager, Cybersecurity

Own end-to-end cybersecurity strategy and authorization execution for complex, mission-critical classified systems at Shield AI in Washington, DC.

• Provide overall accountability for RMF execution across Shield AI classified systems using JSIG
  , DAAPM
  , and NIST SP 800-53
  , with continuous authorization as the target end state.
• Maintain a single authoritative view of authorization posture, including ATO and IATT status
  , expiration dates
  , conditions
  , open POA&M items
  , and assessment findings across systems and sites.
• Own the accreditation roadmap and commit dates in partnership with program management; manage dependencies that affect whether dates hold (facility, network, tooling, personnel).
• Serve as Shield AI’s senior security authority with Authorizing Officials
  , SCAs
  , government program security officers, and DCSA or cognizant SAPCO representatives.
• Define reciprocity and inheritance strategy so implemented controls are reused across programs and sites instead of re-litigated in each package.
• Approve risk acceptance recommendations,
  deviations
  , and mitigation strategies prior to government submission; elevate residual risk to Shield AI leadership with a clear position.
• Define the enterprise continuous monitoring approach, including vulnerability scanning,
  STIG and SRG compliance, audit review, and configuration drift detection
  , and enforce reporting cadence.
• Standardize package templates, control evidence libraries, hardening baselines, and inheritance documentation so new enclaves begin from an accredited pattern.
• Drive automation using infrastructure as code, scripted STIG application, and scan and evidence pipelines to make compliance repeatable.
• Select and own the security compliance toolchain, including eMASS or Xacta
  , ACAS/Nessus
  , SCAP
  , and SIEM
  , including budget, licensing, and government-directed tooling requirements.
• Define metrics that reflect real security posture and report them to Federal Systems and company leadership.
• Partner with IT, network, platform, and product security engineering so security architecture is built in rather than retrofitted for assessment readiness.
• Coordinate with Industrial Security, Facilities, and Contracts for new facility and enclave stand-ups from concept through ATO
  , including accredited network extensions between facilities.
• Advise program managers and engineering leadership on accreditation timelines and the security impact of architecture, schedule, and staffing decisions.
• Lead classified incident response
  , including containment, spillage and contamination response, government reporting, and after-action corrective plans.
• Ensure classified user population readiness: training,
  least-privilege and auditable access, and data transfer and media control actions aligned with program guidance.

• Bachelor’s degree in Cybersecurity, Electrical Engineering, Computer Engineering, Systems Engineering, Computer Science, or related technical field.
• 8+ years of experience in cybersecurity engineering, defense systems, mission systems, or military aerospace programs.
• Experience leading cybersecurity activities for complex integrated systems or defense platforms.
• Strong knowledge of RMF
  , STIGs
  , system hardening, network security, secure architectures, and vulnerability management processes.
• Experience across hardware, software, networking, and mission system integration environments.
• Active Top Secret Clearance with SCI Eligibility
  .

• JSIG, DAAPM, NIST SP 800-53
• RMF, STIGs, SRG
• eMASS, Xacta, ACAS/Nessus, SCAP, SIEM
• Infrastructure as code

• Lead the security strategy behind advanced, mission-critical technology.
• Drive secure and scalable solutions across technical and business teams to protect complex systems, support compliance,…