Manager - Cybersecurity

Starlab Space is a US‑led joint venture and partner network that is ensuring continued human present in low‑earth orbit and dedicated to providing a seamless transition of microgravity research from the International Space Station into the new commercial space station era. Our global team combines decades of flight heritage and human spaceflight experience, from habitat infrastructure and robotic arms to daily payload operations and more.

We firmly believe in space as a tool for transformation, one that can exponentially improve life on earth.

Learn more about us at

The Cybersecurity Manager is responsible for ensuring the safety of information systems assets and protecting systems from intentional or inadvertent access or destruction. Subject matter expert in general or within a specialized field, solves problems which are complex in nature, requiring the application of differing techniques. Relies on extensive experience and judgement to plan and accomplish goals with advanced coordination and control.

A wide degree of creativity and latitude is expected. Tasks and assignments tend to be highly complex, non‑routine and/or require a greater level of expertise. Receives assignments in the form of objectives with goals and process to meet goals outlined.

• Develops and implements enterprise information security architectures and solutions
• Serves as a security expert in application development, database design, network, and/or platform (operating system) efforts, helping project teams comply with enterprise and IT security policies, industry regulations, and best practices
• Researches, designs, and advocates new technologies, architectures, and security products that will support security requirements for the enterprise and its customers, business partners, and vendors
• Contributes to the development and maintenance of information security strategy and architecture
• Analyzes business impact and exposure based on emerging security threats, vulnerabilities, and risks
• Develops and executes security controls, defenses and countermeasures to intercept and prevent internal or external attacks or attempts to infiltrate company email, data, e‑commerce and web‑based systems
• Researches attempted or successful efforts to compromise systems security and designs countermeasures
• Maintains hardware, software and network firewalls and encryption protocols
• Administers security policies to control physical and virtual access to systems
• Provides information to management regarding the negative impact on the business caused by theft, destruction, alteration or denial of access to information and systems.
• Manages and partners with third party information security vendors
• Partners and works with Government agencies, including NASA, the Department of Defense (DoD) and other relevant agencies, on information security matters
• Communicates security risks and solutions to business partners and IT staff as needed
• Participates in annual Information Security training/fairs
• Attends cybersecurity events and participates in other external cybersecurity activities to maintain current in the field
• Responds to emergencies and remediates information security incidents
• Daily availability to include evenings and weekends when necessary to reach goals and deadlines.
• Protected Data & Classification of Data – The position will be responsible for knowledge of government data protection requirements such as but not limited to NIST 800‑53 (moderate & high), NIST 800‑171, Controlled Unclassified Information (CUI), Export controlled/ITAR regulations and subsequent execution or participating with team members in data protection strategies & implementations.
• Project Management - Plans and coordinates all aspects of internal cybersecurity‑specific projects from initiation to delivery. Coordinates work performed by cybersecurity staff and internal customers/partners by defining project requirements, performing feasibility and needs/impact assessments. Develops detailed project plans and manages all implementation processes including resource allocation, progress tracking, monitoring change control process, testing, documentation, training…