Sr Cybersecurity SME (Cryptography & PQC)

InfoVision Inc.; Dallas (TX); On-site; USD 120,000 - 180,000; Full time

Job summary

InfoVision Inc. in Irving, TX seeks a Senior Cybersecurity Subject Matter Expert with deep cryptography expertise and data-analysis skills. You will analyze CBOM/SBOM data across a large app portfolio, identify vulnerabilities, and translate findings into actionable patterns for offsite AI teams to build automated remediation agents.

The role focuses on PQC readiness, secure on-site collaboration, and guiding hybrid TLS implementations and modern key management for enterprise environments.

Qualifications

• Hands-on background in Cybersecurity, Cryptography, and Security Data Analysis.
• Deep knowledge of enterprise encryption, TLS 1.3, AES-256 and PQC concepts.
• Skilled in parsing, querying and analyzing raw security data logs (JSON/SBOM/CBOM).
• Ability to work with 10–20 year old enterprise apps and hardware.
• Willingness to on-site onboarding with strict zero data export rules.

Responsibilities

• Parse and analyze JSON/SBOM/CBOM scans across ~128 applications securely.
• Map cryptographic vulnerabilities and migrations to TLS 1.3 and AES-256-GCM.
• Group applications by infrastructure characteristics and vulnerability signals.
• Create sanitized mapping tables for remediation templates for offshore AI team.
• Guide PQC readiness and hybrid TLS implementations with key management.

Skills

Cybersecurity

Cryptography

Security Data Analysis

Data Parsing

Legacy Infrastructure

Tools

Sonatype

CBOM Kit

Job description

Job Title: Senior Cybersecurity SME (Cryptography & PQC)

Location: Irving, TX

About the Role:

• We are seeking a Senior Cybersecurity Subject Matter Expert with deep domain knowledge in enterprise encryption, Post-Quantum Cryptography (PQC) readiness, and cryptographic vulnerability analysis.
• You will be the tip of the spear on a high-stakes AI-driven automation project.
• Working securely on-site, you will analyze massive datasets of Cryptography Bill of Materials (CBOM) to identify vulnerability patterns across hundreds of legacy and modern applications.
• You will serve as the critical intelligence bridge, translating raw security gaps into actionable technical patterns that our offsite AI engineering teams will use to build automated remediation agents.

Must-Have Qualifications:

• Senior-Level Expertise: Extensive, hands‑on background in Cybersecurity, Cryptography, and Security Data Analysis.
• Deep Cryptographic Knowledge: Absolute technical mastery of enterprise encryption protocols, including TLS 1.3, IKEv2 IPsec, AES‑256, and modern PQC concepts (e.g., ML‑KEM, ML‑DSA).
• Data Parsing Skills: High proficiency in parsing, querying, and analyzing raw security data logs (JSON, SBOM, CBOM formats) to extract actionable trends.
• Legacy Infrastructure Acumen: Ability to understand and navigate the constraints of 10‑to‑20‑year‑old revenue‑generating enterprise applications and hardware.
• Security Clearance/Compliance: Must be eligible and willing to clear expedited enterprise security onboarding and work on‑site under strict, zero‑data‑export handling protocols

What You Will Do:

• Analyze Complex Security Data: Securely parse and analyze raw JSON/SBOM/CBOM scans (generated by tools like Sonatype and CBOM Kit) across an enterprise portfolio of ~128 applications.
• Map Cryptographic Vulnerabilities: Identify critical deviations from target North Star standards, specifically mapping migrations from TLS 1.0/1.2 to TLS 1.3, weak ciphers to AES‑256‑GCM, and outdated SSH host keys to modern standards.
• Identify Ecosystem Patterns: Group applications by their infrastructure characteristics and vulnerability signatures, factoring in complex constraints like hardware load balancers, IoT device memory limits, and legacy undocumented business rules.
• Architect Characteristic Maps: Build comprehensive, sanitized technical mapping tables that define exactly what remediation templates need to be built by the offshore Cloud/AI team, ensuring zero proprietary vulnerability data leaves the secure network.
• Drive PQC Readiness: Guide the structural transition logic for Post‑Quantum Cryptography (PQC) readiness, focusing on hybrid TLS implementations and modern key management.