Location: Huntsville, AL
Facility: On-Site
Security Clearance: Active TS Required
Travel: 10%
Summary Cybersecurity Manager (Government & Commercial Systems) to lead corporate-level and program-level cybersecurity strategy, risk management, and authorization across a hybrid DoW and commercial space enterprise. This role is responsible for securing a complex system-of-systems including satellite payloads, spacecraft interfaces, ground infrastructure, RF systems, mission operations centers, and cloud-based software platforms. The ideal candidate understands how to apply DoW RMF requirements while enabling commercial agility, scalability, and operational tempo.
Key Responsibilities System-of-Systems Cybersecurity Leadership - Serve as the cybersecurity authority across interconnected DoW and commercial systems supporting space and ground operations
- Define and maintain system-level security architecture, including trust boundaries, data flows, cross-domain interfaces, and inheritance models that support both classified and unclassified environments
- Establish and enforce security baselines and control allocation strategies that satisfy government requirements while remaining practical for commercial operations
RMF, Authorization & Compliance - Lead execution of the DoW Risk Management Framework (RMF) across multiple systems and security enclaves
- Develop and maintain System Security Plans (SSPs), Security Assessment Plans (SAPs), Security Assessment Reports (SARs), and Plans of Action & Milestones (POA&Ms)
- Prepare and submit classified and unclassified RMF authorization packages to support Authority to Operate (ATO) and interim approval decisions
- Coordinate directly with Authorizing Officials (AOs), Information Owners (IOs), and government stakeholders to justify control tailoring, deviations, and risk acceptance
Vulnerability & Risk Management - Direct vulnerability management across space, ground, and cloud environments
- Manage vulnerability scanning and compliance
- Analyze scan results, oversee IAVM reporting, and drive remediation through closure
- Conduct and submit system-level self-assessments and risk assessments ISO continuous authorization
Engineering, Operations & Business Integration - Collaborate with software developers, systems engineers, RF engineers, operations teams, program managers, and business development to integrate cybersecurity throughout the lifecycle
- Ensure cybersecurity is embedded in system design, scheduling software, payload C2, ground infrastructure, and operations center workflows
- Provide cybersecurity input to program planning, milestone reviews, audits, and proposal development
- Balance government compliance requirements with commercial delivery schedules
Required Qualifications - Bachelors or Masters degree in Cybersecurity, Computer Science, Information Assurance, or a related technical field (or equivalent experience) and 8+ years of cybersecurity experience, including system-level or enterprise-level RMF leadership
- Extensive hands-on experience with SSPs, SAPs, SARs, POA&Ms, & eMASS artifacts
- Proven experience preparing and submitting classified and unclassified RMF packages in support of ATO decisions
- Strong background in vulnerability management, risk analysis, and remediation
- Active Top Secret security clearance
Preferred Qualifications - Experience supporting space systems, satellite ground stations, mission operations centers, or aerospace defense programs
- Demonstrated experience securing hybrid DoW and commercial systems
- Familiarity with cloud security, DevSecOps, and secure software delivery in regulated environments
- Experience with segmented networks, cross-domain architectures, and mixed-classification systems
- Prior experience leading or mentoring ISSO, ISSM, or security engineering teams
- Experience with eMASS, including execution of self-assessments, development of implementation plans, and ongoing continuous monitoring activities
- Relevant certifications such as CISSP, CISM, CAP, Security+
What We Offer - System-level authority over cybersecurity for a hybrid government/commercial space program
- High-impact role bridging compliance, engineering, and operations
- Opportunity to shape long-term cybersecurity strategy in a growing space enterprise
- Competitive compensation and comprehensive benefits
