Cybersecurity Manager I

Sierra Nevada Corporation•Englewood, CO

22h•Onsite

About The Position

Are you looking to advance your career and flex your leadership and IT skills in a fast-paced and rewarding organization? The Cybersecurity Manager I is responsible for designing, testing, and implementing secure operating systems, networks, and security monitoring tools. This role involves managing IT security systems, conducting risk assessments, performing incident response, and overseeing digital forensics. The Manager I will also develop and enforce security controls, participate in security awareness programs, and prepare security reports for regulatory agencies. As SNC's corporate team, we provide the company and its business areas with strategic direction and business support spanning executive management, finance and accounting, operations, human resources, legal, IT, information security, facilities, marketing, and communications.

Requirements

Bachelor's degree in Cybersecurity, Network Engineering, Information Technology or related Engineering field of study.
7+ years of experience in a related area.
Relevant experience can be considered as a substitute for the required educational qualifications.
In the absence of a degree, a minimum of 11 years of related experience is required.
Higher level relevant degree may substitute for experience.
Strong understanding of cybersecurity principles and network architectures.
Experience with risk assessment, incident response, and digital forensics.
Knowledge of technical standards relating to systems security; experience administering UNIX, Linux, and Windows operating systems, experience with large-scale server systems, thin client architecture, system virtualization, and other related peripherals.
Experience with Assessment and Authorization (A&A) requirements as outlined in the National Industrial Security Program Operating Manual (NISPOM), Risk Management Framework (RMF) for DOD, ICD 503, Joint Special Access Program (SAP) Implementation Guide (JSIG) & National Institute of Standards and Technology (NIST) RMF.
The ability to obtain and maintain a Secret U.S. Security Clearance is required.
U.S. Citizenship status is required as this position needs an active U.S. Security Clearance for employment.
Non-U.S. citizens may not be eligible to obtain a security clearance.

Nice To Haves

Advanced certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or similar.
Hands-on experience with advanced cybersecurity tools across SIEM, IDS/IPS, perimeter security (firewalls), cloud security, endpoint detection and response (EDR), network detection and response (NDR), network access control (NAC), and data loss prevention (DLP) platforms.
Working knowledge of AI security practices and AI Security Posture Management (AISPM), including identifying, assessing, and mitigating risks introduced by AI/ML systems and their integration into the enterprise.
Experience leveraging AI-driven tools and automation to increase efficiency and expedite security assessments, vulnerability management, and other operational security processes.
Strong leadership, analytical, problem-solving, and communication skills.
Knowledge of DoD, government contracting and/or public auditing, policies, standards, and procedures.

Responsibilities

Lead, mentor, and develop the Security Engineering team, including hiring, performance management, and career growth planning.
Set team priorities, workload, and resourcing to align with the enterprise security architecture roadmap and roadmap milestones.
Own the team's technical standards and quality bar for secure design, testing, and implementation of operating systems, networks, and security monitoring tools.
Partner with the Enterprise Security Architect to translate architecture strategy and standards into actionable engineering plans, ensuring designs are implementable and operationally sound.
Oversee design reviews and secure-by-design practices across infrastructure, network, and application environments.
Direct the evaluation, deployment, and lifecycle management of security tools and platforms.
Direct risk and vulnerability assessment programs across network, system, and application layers, ensuring findings are prioritized and remediated on schedule.
Develop, implement, and enforce security controls and operational risk mitigations, and track their effectiveness over time.
Act as a key liaison between Security Engineering and the Enterprise Security Architect, senior leadership, and cross-functional teams to embed security requirements into IT project lifecycles from design through deployment.
Communicate risk posture, program status, and incident learnings to senior leadership in clear, business-relevant terms.