Sr. Manager - Cybersecurity

Aevex • Tampa, FL

1d • Hybrid

About The Position

The Senior Manager - Cybersecurity leads cybersecurity across enterprise IT and defense program environments. This hands-on leadership role manages teams spanning cloud security, infrastructure security, vulnerability management, and endpoint management, and partners closely with Engineering leadership and program technical leads to secure development environments, engineering networks, source code repositories, CI/CD pipelines, and software delivery pathways for embedded systems and airborne platforms. The role combines technical architecture and troubleshooting with people leadership and communication with executives, program leaders, and business partners.

The position oversees cybersecurity architecture and operations across cloud platforms, identity systems, networks, servers, and endpoints; manages security initiatives, resources, vendors, budgets, and a cybersecurity roadmap; and coordinates incident response, investigations, recovery, vulnerability remediation, and security metrics. The environment includes Microsoft GCC High and technologies such as CrowdStrike, Zscaler, ThreatLocker, NinjaOne, Microsoft Intune, GitLab, AWS, Azure, and self-hosted AI solutions.

The role leads security improvements for engineering development environments and software supply chains, including GitLab repositories, build systems, test environments, CI/CD pipelines, software artifacts, and deployment pathways to aircraft and other mission platforms. It also guides embedded Linux hardening, supports defense program security requirements and assessment activities, and partners with Engineering and IT to assess and secure self-hosted AI infrastructure and deployments.

The Senior Manager maintains security policies, standards, procedures, and controls supporting contractual and regulatory requirements; supports CMMC readiness and SOX IT controls; oversees recurring security and compliance activities; and coordinates with customers, assessors, auditors, and external security partners. The role also provides employee oversight, sets performance standards, maintains work schedules, and develops team members.

This is a hybrid position in Tampa, Florida, with up to 20% required travel. U.S. citizenship and the ability to obtain and maintain a DoD clearance are required. AEVEX supports U.S. national security and partner-nation missions through aviation, remote sensing, analysis, engineering, and related solutions.

Requirements

• Bachelor’s degree in cybersecurity, computer science, engineering, or a related field, or equivalent practical experience.
• At least 8 years of experience in cybersecurity engineering, infrastructure security, or enterprise IT security.
• Experience leading cybersecurity or closely related technical teams within aerospace, defense, or the Defense Industrial Base.
• Strong hands-on technical background across cloud security, infrastructure, identity and access management, vulnerability management, and endpoint security.
• Experience implementing, administering, or securing several of CrowdStrike, Zscaler, ThreatLocker, NinjaOne, Microsoft Intune, GitLab, AWS, and Azure.
• Practical experience securing infrastructure and workloads in AWS and/or Azure.
• Experience securing Linux environments and embedded or mission systems.
• Experience partnering directly with software and systems engineering organizations to secure development infrastructure, software delivery workflows, and software supply chains.
• Experience evaluating and protecting the movement of code and software artifacts from development repositories to operational platforms.
• Experience implementing and sustaining CMMC and NIST SP 800-171 controls.
• Experience supporting SOX IT general controls, particularly access management, change management, and IT operations.
• Direct experience with GitLab repository security, runners, CI/CD pipelines, and software artifact management in regulated or defense environments.
• Experience deploying or securing self-hosted AI solutions, including locally hosted language models, inference services, and supporting infrastructure.
• Experience supporting unmanned aircraft, avionics, or other embedded defense platforms.
• Experience with Microsoft GCC High, Azure Government, and hybrid enterprise environments.
• Proven ability to lead and develop technical teams while remaining hands-on.
• Solid understanding of security best practices, including vulnerability management, system hardening, and access control.
• Strong troubleshooting, problem-solving, and decision-making skills.
• Excellent communication and cross-functional collaboration abilities.
• Familiarity with defense program cybersecurity requirements, the Risk Management Framework (RMF), and system assessment and authorization processes.
• Familiarity with secure boot, code signing, software bills of materials, dependency analysis, and software supply chain security.
• Ability to evaluate security tool configurations, troubleshoot integrations, and guide technical implementation.
• Strong understanding of Git-based source control, CI/CD pipelines, build and test environments, secrets management, and secure software delivery.
• Ability to assess network architecture, system connectivity, trust boundaries, and data flows across enterprise and engineering environments.
• Proven ability to manage people, prioritize competing demands, and deliver improvements in a complex environment.
• Ability to explain technical risks and recommended actions clearly to technical and nontechnical audiences.
• Strong interpersonal skills and an approachable, collaborative leadership style.
• Ability to exercise sound judgment, communicate clearly, and follow through.
• Ability to work directly with engineers on complex problems, develop team members, and help leadership make practical decisions about cybersecurity risk, program needs, and business priorities.
• Ability to establish effective security practices through strong organizational partnerships.
• Ability to obtain and maintain a DoD clearance.
• U.S. citizenship required.
• Meet the stated physical demands, with reasonable accommodations available to enable individuals with disabilities to perform essential functions.

Nice To Haves

• Relevant certifications such as CISSP, CISM, CCSP, or comparable technical credentials.
• Experience supporting unmanned aircraft, avionics, or other embedded defense platforms.
• Experience deploying or securing self-hosted AI solutions, including locally hosted language models, inference services, and supporting infrastructure.
• Experience with Microsoft GCC High, Azure Government, and hybrid enterprise environments.

Responsibilities

• Lead, mentor, and develop a technical team across cloud security, infrastructure security, vulnerability management, and endpoint management.
• Set team priorities, accountability, and professional development plans while balancing enterprise needs, program delivery, and available resources.
• Develop and execute a cybersecurity roadmap aligned with business objectives, defense program requirements, and organizational risk.
• Manage cybersecurity initiatives, resource planning, vendor relationships, and associated budgets.
• Communicate cybersecurity risks, priorities, and investment needs to support informed decisions.
• Build working relationships across IT, Engineering, program management, compliance, and business leadership.
• Direct security architecture and operations across cloud platforms, identity systems, networks, servers, and endpoints.
• Oversee CrowdStrike configuration, integration, threat detection, investigation, and response capabilities.
• Guide use of Zscaler to protect access and traffic across enterprise, cloud, and engineering environments.
• Oversee ThreatLocker application control and privilege management.
• Lead endpoint configuration, patching, security, and compliance practices using NinjaOne and Microsoft Intune.
• Direct AWS and Azure security architecture, including identity and access management, network segmentation, logging, workload protection, and secure configuration.
• Oversee vulnerability identification, prioritization, remediation, and validation across Windows, Linux, cloud, and supporting infrastructure.
• Lead incident response coordination, technical investigations, recovery activities, and resulting security improvements.
• Establish metrics to measure security effectiveness, remediation progress, and operational performance.
• Lead cybersecurity efforts supporting engineering development environments, defense programs, embedded Linux systems, and airborne platforms.
• Partner with Engineering leadership and program technical leads to incorporate cybersecurity throughout the software and systems development, deployment, and sustainment lifecycle.
• Assess, standardize, and improve development environment connectivity, including engineering workstations, repositories, build systems, test environments, and supporting network pathways.
• Secure the flow of source code and software artifacts from repositories through build pipelines, testing, release, and deployment onto aircraft and other mission platforms.
• Partner with Engineering to secure GitLab repositories, runners, CI/CD pipelines, secrets, dependencies, and software artifacts.
• Establish controls for repository access, build environments, artifact integrity, release authorization, and deployment traceability.
• Identify and reduce cybersecurity risks in development workflows, inter-environment connectivity, tooling integrations, and software distribution mechanisms.
• Evaluate and secure interfaces and data flows between enterprise systems, engineering environments, cloud services, ground systems, and deployed platforms.
• Guide embedded Linux system hardening, vulnerability assessment, secure configuration, and remediation within mission performance and operational constraints.
• Support program-specific security requirements, customer reviews, and assessment or authorization activities as applicable.
• Partner with Engineering and IT to assess, deploy, and secure self-hosted AI solutions.
• Establish security requirements for AI hosting infrastructure, model access, sensitive data handling, integrations, logging, and vulnerability management.
• Evaluate risks involving model and software provenance, sensitive data exposure, prompt injection, and AI-connected tools.
• Ensure AI deployments follow established access, change management, and data protection practices.
• Maintain security policies, standards, procedures, and technical controls supporting contractual and regulatory requirements.
• Partner with compliance, finance, and internal audit teams to support CMMC readiness and SOX IT controls.
• Translate compliance requirements into sustainable technical and operational practices.
• Ensure security practices produce consistent evidence, including access reviews, change approvals, vulnerability remediation records, and configuration documentation.
• Oversee recurring security activities, including risk assessments, incident response exercises, configuration reviews, and firewall and privileged access reviews.
• Track security findings and corrective actions through resolution, escalating material risks and resource needs to leadership.
• Coordinate with customers, assessors, auditors, and external security partners as needed.
• Maintain employee work schedules and provide oversight and direction in accordance with company policies and procedures.
• Set performance standards and encourage employee engagement and results through delegation, continuous feedback, goal setting, and performance management.
• Perform other duties as required.
• Maintain regular and reliable attendance on a full-time basis or in accordance with the posted schedule.
• Exhibit professional behavior with internal and external business associates and align daily actions with company values and department goals.

Benefits

• 401(k) retirement plan
• Medical insurance, with a portion of premiums paid by the company
• Dental insurance, with a portion of premiums paid by the company
• Vision insurance, with a portion of premiums paid by the company
• Disability insurance, with a portion of premiums paid by the company
• Life insurance, with a portion of premiums paid by the company
• Professional development funds
• Employee Assistance Plan (EAP), including counseling, legal help, and child and elder care support for qualified employees

What This Job Offers

• Job Type: Full-time
• Career Level: Senior