SME - Cybersecurity (COS)

Boost•Colorado Springs, CO

2d•Onsite

About The Position

BOOST LLC is a dynamic management consulting firm that offers an array of government-compliant back-office solutions to support our teaming partners within the GovCon space. We are partnering with our client, Galaxia Technologies, to hire a SME - Cybersecurity (COS) in Colorado Springs, CO to play a key role in advancing the USSF’s Warp Core data platform. About Galaxia Technologies At Galaxia Technologies, we lead the way for secure, mission-ready software solutions that advance the nation’s most critical objectives. Our teams combine deep technical expertise, disciplined execution, and an unwavering commitment to mission assurance—delivering systems that enable information dominance, operational continuity, and strategic decision advantage. We operate at the crossroads of enterprise innovation and national defense, supporting customers across space, cyber, and intelligence domains. The Opportunity Galaxia Technologies Inc. is seeking a Subject Matter Expert (SME) - Cybersecurity to rapidly advance the assessment and implementation of mission-critical systems. As a Cybersecurity SME, you will provide expert guidance to enhance the organization's security posture, mitigate risks, and ensure compliance with industry standards. You will collaborate with cross-functional teams and leadership to assess and conduct gap analysis of innovative, scalable, and resilient security solutions.

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, or a related field, and 12+ years of experience in cybersecurity architecture; or Master’s degree and 10+ years of experience.
12+ years of progressive experience as a cybersecurity engineer securing and assessing large scale/complex enterprise software efforts
5+ years of commercial industry experience with a proven track record of successfully securing and assessing complex enterprise software projects
Advanced knowledge of threat analysis, vulnerability management, and incident response best practices.
Knowledge reviewing the outputs from security tools, including SIEMs, firewalls, IDS/IPS, and endpoint protection solutions.
Expert knowledge of security frameworks, compliance standards, and regulations (e.g., NIST, ISO 27001, GDPR, DoD RMF).
Detailed understanding of and experience with identity and access management (IAM), encryption technologies, network/cloud security, and secure software development best practices.
Proficiency in conducting threat modeling and risk analysis to identify and mitigate vulnerabilities.
Expert problem-solving and analytical skills in addressing complex, large-scale security challenges.
Excellent communication skills for engaging with leadership, stakeholders, development teams, and industry or academic communities.
Ability to obtain and maintain a TS/SCI clearance and willingness to take a CI polygraph.

Nice To Haves

Certifications such as CISSP, CISM, CEH, GIAC, or CCSP.
Experience securing government or defense-related systems and environments.
Expertise in advanced threat detection, threat hunting, and forensic analysis.
Knowledge of DevSecOps practices and integrating security into CI/CD pipelines.
Familiarity with zero-trust architectures and AI-driven security technologies.
Experience working in highly classified environments supporting the IC/DoD for operational missions

Responsibilities

Conduct independent, in-depth evaluations of system security controls to ensure compliance and a strong cybersecurity hygiene.
Serve as a technical expert on cybersecurity matters, providing guidance on risk management, threat mitigation, and compliance strategies.
Oversee vulnerability assessments, penetration testing, and threat modeling to identify gaps/risks and recommend corrective actions.
Evaluate and provide recommendations on security policies, frameworks, and standards aligned with NIST, ISO 27001, GDPR, and DoD RMF requirements.
Collaborate with engineering, operations, and leadership teams to integrate security best practices into system and software development lifecycles (SDLC).
Stay updated on emerging cybersecurity threats, technologies, and regulations to maintain a cutting-edge security strategy.
Mentor and train team members on cybersecurity practices and tools.
Present security assessment reports, recommendations, and metrics to senior leadership and stakeholders.