Senior Manager, Cybersecurity

Cybersecurity Jobs; Washington (District of Columbia); On-site; USD 170,000 - 250,000; Full time

Benefits offered by this job

Bonus

Benefits

Equity

Job summary

Shield AI in Washington, DC seeks a senior cybersecurity leader to own end-to-end RMF execution for its classified systems. You will manage accreditation roadmaps, collaborate with government security officers, and ensure continuous monitoring and rapid remediation of findings.

You will drive automation, oversee toolchains like eMASS or Xacta and SCAP, and coordinate with program management to meet critical deadlines while maintaining a robust security posture.

Qualifications

• Bachelor’s degree in a technical field related to cybersecurity.
• 8+ years of cybersecurity engineering experience in defense or aerospace programs.
• Active Top Secret Clearance with SCI Eligibility.
• Strong knowledge of RMF, STIGs, system hardening, and vulnerability management.

Responsibilities

• Own accreditation roadmap and manage ATO processes across Shield AI programs.
• Lead RMF execution for Shield AI classified systems using JSIG, DAAPM, and NIST SP 800-53.
• Coordinate with government program security officers and officials to ensure accreditation readiness.
• Drive automation and continuous monitoring via infrastructure as code, STIG application, and evidence pipelines.

Skills

RMF execution

Leadership

Security architecture

Vulnerability management

Cross-functional collaboration

Education

Bachelor’s degree in Cybersecurity

Tools

eMASS/Xacta

ACAS/Nessus

SCAP

SIEM

Cameo Systems Modeler

Job description

Own end-to-end cybersecurity strategy and authorization execution for complex, mission-critical classified systems at Shield AI in Washington, DC.

Responsibilities

• Provide overall accountability for RMF execution across Shield AI classified systems using JSIG, DAAPM, and NIST SP 800-53, with continuous authorization as the target end state.
• Maintain a single authoritative view of authorization posture, including ATO and IATT status, expiration dates, conditions, open POA&M items, and assessment findings across systems and sites.
• Own the accreditation roadmap and commit dates in partnership with program management; manage dependencies that affect whether dates hold (facility, network, tooling, personnel).
• Serve as Shield AI’s senior security authority with Authorizing Officials, SCAs, government program security officers, and DCSA or cognizant SAPCO representatives.
• Define reciprocity and inheritance strategy so implemented controls are reused across programs and sites instead of re-litigated in each package.
• Approve risk acceptance recommendations, deviations, and mitigation strategies prior to government submission; elevate residual risk to Shield AI leadership with a clear position.
• Define the enterprise continuous monitoring approach, including vulnerability scanning, STIG and SRG compliance, audit review, and configuration drift detection, and enforce reporting cadence.
• Standardize package templates, control evidence libraries, hardening baselines, and inheritance documentation so new enclaves begin from an accredited pattern.
• Drive automation using infrastructure as code, scripted STIG application, and scan and evidence pipelines to make compliance repeatable.
• Select and own the security compliance toolchain, including eMASS or Xacta, ACAS/Nessus, SCAP, and SIEM, including budget, licensing, and government-directed tooling requirements.
• Define metrics that reflect real security posture and report them to Federal Systems and company leadership.
• Partner with IT, network, platform, and product security engineering so security architecture is built in rather than retrofitted for assessment readiness.
• Coordinate with Industrial Security, Facilities, and Contracts for new facility and enclave stand-ups from concept through ATO, including accredited network extensions between facilities.
• Advise program managers and engineering leadership on accreditation timelines and the security impact of architecture, schedule, and staffing decisions.
• Lead classified incident response, including containment, spillage and contamination response, government reporting, and after-action corrective plans.
• Ensure classified user population readiness: training, least-privilege and auditable access, and data transfer and media control actions aligned with program guidance.

Requirements

• Bachelor’s degree in Cybersecurity, Electrical Engineering, Computer Engineering, Systems Engineering, Computer Science, or related technical field.
• 8+ years of experience in cybersecurity engineering, defense systems, mission systems, or military aerospace programs.
• Experience leading cybersecurity activities for complex integrated systems or defense platforms.
• Strong knowledge of RMF, STIGs, system hardening, network security, secure architectures, and vulnerability management processes.
• Experience across hardware, software, networking, and mission system integration environments.
• Active Top Secret Clearance with SCI Eligibility.

Technologies

• JSIG, DAAPM, NIST SP 800-53
• RMF, STIGs, SRG
• eMASS, Xacta, ACAS/Nessus, SCAP, SIEM
• Infrastructure as code

What You’ll Do

• Lead the security strategy behind advanced, mission-critical technology.
• Drive secure and scalable solutions across technical and business teams to protect complex systems, support compliance, and prepare for real-world operations.

Preferred Qualifications

• Experience supporting military aircraft, UAV, mission systems, or tactical communication platforms.
• Familiarity with resilient system architectures, zero trust principles, cross-domain solutions, and contested environment operations.
• Experience with MBSE methodologies and tools such as Cameo Systems Modeler.
• Background supporting cybersecurity test events, airworthiness, or platform accreditation activities.

Pay and Benefits Information

• $170,000 - $250,000 per year.
• Pay within range listed plus bonus, benefits, and equity.
• Pay within range listed above plus a temporary benefits package (applicable after 60 days of employment).
• Salary compensation is influenced by skill set, level of experience, licenses and certifications, and specific work location.
• Offers are contingent on a cleared background and a possible reference check.