{"id":3494784,"url":"https://alion.io/job/aevex-sr-manager-cybersecurity","title":"Sr. Manager - Cybersecurity","company":{"id":3221864,"name":"AEVEX","domain":"aevex.com","url":"https://alion.io/company/aevex","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":87,"open_postings":45,"ghost_share":0,"stale_share":0.533,"repost_share":0,"time_to_fill_p50_days":23,"computed_at":"2026-11-01T06:10:25Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Tampa, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":103000,"max_usd":196000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":1385},"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"CMMC","optional":false},{"name":"Crowdstrike","optional":false},{"name":"Git","optional":false},{"name":"GitLab","optional":false},{"name":"Linux","optional":false},{"name":"Solana","optional":false},{"name":"Windows","optional":false},{"name":"Zscaler","optional":false}],"status":"live","first_seen_at":"2026-10-29T20:38:57Z","employer_posted_date":"2026-10-29","last_verified_at":"2026-11-02T04:15:22Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"Work Arrangement\nThis is a hybrid position located in Tampa, FL with up to 20% of required travel.\n Job Overview\nThe Senior Manager - Cybersecurity will lead cybersecurity across enterprise IT and defense program environments, combining strong technical expertise with effective people management and a collaborative leadership style. This leader will manage a team responsible for cloud security, infrastructure security, vulnerability management, and endpoint management, while working closely with Engineering leadership and program technical leads to secure development environments, engineering networks, source code repositories, CI/CD pipelines, and software delivery pathways supporting embedded systems and airborne platforms.\nThis is a hands-on leadership role requiring someone who can evaluate architectures, troubleshoot complex technical issues, and guide technical teams while communicating clearly with executives, program leaders, and business partners. The ideal candidate brings cybersecurity management experience within aerospace, defense, or the Defense Industrial Base, with demonstrated success securing enterprise infrastructure, engineering environments, and the movement of software from development through deployment.\nThe GCC-High Microsoft technology environment includes CrowdStrike, Zscaler, ThreatLocker, NinjaOne, Microsoft Intune, GitLab, AWS, Azure, and self-hosted AI solutions.\nEssential Functions\nTeam Leadership and Strategy\nLead, mentor, and develop a technical team spanning cloud security, infrastructure security, vulnerability management, and endpoint management.\nEstablish clear priorities, accountability, and professional development plans while balancing enterprise needs, program delivery, and available resources.\nDevelop and execute a cybersecurity roadmap aligned with business objectives, defense program requirements, and organizational risk.\nManage cybersecurity initiatives, resource planning, vendor relationships, and associated budgets.\nCommunicate cybersecurity risks, priorities, and investment needs in practical terms that support informed decisions.\nBuild strong working relationships across IT, Engineering, program management, compliance, and business leadership.\nEnterprise Cybersecurity and Core Technologies\nDirect security architecture and operations across cloud platforms, identity systems, networks, servers, and endpoints.\nOversee the configuration, integration, and effectiveness of CrowdStrike for endpoint protection, threat detection, investigation, and response.\nGuide the use of Zscaler to protect access and traffic across enterprise, cloud, and engineering environments.\nOversee ThreatLocker application control and privilege management to reduce unauthorized software execution and excessive permissions.\nLead endpoint configuration, patching, security, and compliance practices using NinjaOne and Microsoft Intune, establishing clear ownership and consistent coverage.\nDirect security architecture across AWS and Azure, including identity and access management, network segmentation, logging, workload protection, and secure configuration.\nOversee vulnerability identification, prioritization, remediation, and validation across Windows, Linux, cloud, and supporting infrastructure.\nLead incident response coordination, technical investigations, recovery activities, and resulting security improvements.\nEstablish meaningful metrics to measure security effectiveness, remediation progress, and operational performance.\nDefense Programs and Engineering Environments\nLead cybersecurity efforts supporting engineering development environments, defense programs, embedded Linux systems, and airborne platforms.\nPartner with Engineering leadership and program technical leads to incorporate cybersecurity throughout the software and systems development, deployment, and sustainment lifecycle.\nLead the assessment, standardization, and security improvement of development environment connectivity, including engineering workstations, repositories, build systems, test environments, and supporting network pathways.\nSecure the flow of source code and software artifacts from repositories through build pipelines, testing, release, and deployment onto aircraft and other mission platforms.\nPartner with Engineering to secure GitLab repositories, runners, CI/CD pipelines, secrets, dependencies, and software artifacts.\nEstablish controls for repository access, build environments, artifact integrity, release authorization, and deployment traceability.\nIdentify and reduce cybersecurity risks associated with development workflows, inter environment connectivity, tooling integrations, and software distribution mechanisms.\nEvaluate and secure interfaces and data flows between enterprise systems, engineering October 19, 2026 Version: 3 Created By: Mary Nolan Created By: Mary Nolan October 19, 2026 Version: 3 environments, cloud services, ground systems, and deployed platforms.\nGuide embedded Linux system hardening, vulnerability assessment, secure configuration, and remediation within mission performance and operational constraints.\nSupport program-specific security requirements, customer reviews, and assessment or authorization activities as applicable.\nSelf-Hosted AI Security\nPartner with Engineering and IT to assess, deploy, and secure self-hosted AI solutions supporting business and program needs.\nEstablish security requirements for AI hosting infrastructure, model access, sensitive data handling, integrations, logging, and vulnerability management.\nEvaluate risks associated with model and software provenance, sensitive data exposure, prompt injection, and AI-connected tools.\nEnsure AI deployments follow established access, change management, and data protection practices.\nGovernance, Risk, and Compliance\nMaintain security policies, standards, procedures, and technical controls that support contractual and regulatory requirements.\nPartner with compliance, finance, and internal audit teams to support CMMC readiness and SOX IT controls.\nTranslate compliance requirements into sustainable technical and operational practices.\nEnsure security practices produce consistent evidence, including access reviews, change approvals, vulnerability remediation records, and configuration documentation.\nOversee recurring security activities, including risk assessments, incident response exercises, configuration reviews, and firewall and privileged access reviews.\nTrack security findings and corrective actions through resolution, escalating material risks and resource needs to leadership.\nCoordinate with customers, assessors, auditors, and external security partners as needed.\nPerform other duties as required.\nStandard Essential Functions\nRegular and reliable attendance on a full time basis [or in accordance with posted schedule].\nResponsible for exhibiting professional behavior with both internal and external business associates that reflects positively on the company and is consistent with the company's policies and practices.\nEmbodies AEVEX’s cultural values and aligns daily actions with department goals and company culture.\nQualifications and Competencies\nProven ability to lead and develop technical teams while remaining hands-on\nSolid understanding of security best practices including vulnerability management, system hardening, and access control\nStrong troubleshooting, problem-solving, and decision-making skills\nExcellent communication and cross-functional collaboration abilities\nFamiliarity with defense program cybersecurity requirements, the Risk Management Framework (RMF), and system assessment and authorization processes.\nFamiliarity with secure boot, code signing, software bills of materials, dependency analysis, and software supply chain security.\nAbility to evaluate security tool configurations, troubleshoot integrations, and guide technical implementation.\nStrong understanding of Git-based source control, CI/CD pipelines, build and test environments, secrets management, and secure software delivery.\nAbility to assess network architecture, system connectivity, trust boundaries, and data flows across enterprise and engineering environments.\nProven ability to manage people, prioritize competing demands, and deliver improvements in a complex environment.\nAbility to explain technical risks and recommended actions clearly to both technical and nontechnical audiences.\nStrong interpersonal skills and an approachable, collaborative leadership style.\nAbility to express sound judgement, clear communication, and follow through\nAbility to work directly with engineers on complex problems, developing team members, and helping leadership make practical decisions about cybersecurity risk, program needs, and business priorities\nAbility to establish effective security practices through strong partnerships across the organization.\nChampions AEVEX’s culture and empowers employees to take responsibility for their jobs and goals.\nEngages employees by creating a climate in which they want to do their best.\nSets performance standards and encourages employee engagement and results through delegation, continuous feedback, goal setting, and performance management.\nMaintains employee work schedules.\nProvides oversight and direction to the employees in accordance with AEVEX’s policies and procedures.\nEducation / Certifications\nBachelor’s degree in cybersecurity, computer science, engineering, or a related field, or equivalent practical experience.\nRelevant certifications such as CISSP, CISM, CCSP, or comparable technical credentials.\nExperience\n8+ years of experience in cybersecurity engineering, infrastructure security, or enterprise IT security.\nExperience leading cybersecurity or closely related technical teams within aerospace, defense, or the Defense Industrial Base.\nStrong hands-on technical background across cloud security, infrastructure, identity and access management, vulnerability management, and endpoint security.\nExperience implementing, administering, or securing several of the organization’s core platforms: CrowdStrike, Zscaler, ThreatLocker, NinjaOne, Microsoft Intune, GitLab, AWS, and Azure.\nPractical experience securing infrastructure and workloads in AWS and/or Azure.\nExperience securing Linux environments and embedded or mission systems.\nExperience partnering directly with software and systems engineering organizations to secure development infrastructure, software delivery workflows, and software supply chains.\nExperience evaluating and protecting the movement of code and software artifacts from development repositories to operational platforms.\nExperience implementing and sustaining CMMC and NIST SP 800-171 controls.\nExperience supporting SOX IT general controls, particularly access management, change management, and IT operations.\nDirect experience with GitLab repository security, runners, CI/CD pipelines, and software artifact management in regulated or defense environments.\nExperience deploying or securing self-hosted AI solutions, including locally hosted language models, inference services, and supporting infrastructure.\nExperience supporting unmanned aircraft, avionics, or other embedded defense platforms.\nExperience with Microsoft GCC High, Azure Government, and hybrid enterprise environments.\n Physical Requirements\nThe physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. While performing the duties the employee is:\nFrequently required to sit, and to reach to use computers and other office equipment.\nFor the purpose of this summary, occasionally is used to represent up to 1/3 of the time given to the work day, frequently represents 1/3 to 2/3 of the time and constantly represents 2/3 or more of the time.\nSecurity Clearance\nAbility to obtain/maintain a DoD clearance, U.S. Ci...","description_format":"text","description_chars":14402,"description_truncated":true,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":["Life insurance","Professional development","Retirement plans"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Military Drones","Defense AI"],"lifecycle":[{"event":"open","at":"2026-10-30T01:00:47Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":2,"expected_fill_days":23,"reasons":["conf:1","stale_co","velocity","win:early"],"computed_at":"2026-11-01T06:10:25Z"},"pay":null,"html_url":"https://alion.io/job/aevex-sr-manager-cybersecurity","json_url":"https://alion.io/job/aevex-sr-manager-cybersecurity.json","meta":{"generated_at":"2026-11-02T04:27:19Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":6536,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-03T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3221864},"rest":"https://alion.io/mcp/rest/get_company?id=3221864"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Faevex-sr-manager-cybersecurity"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Faevex-sr-manager-cybersecurity"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Faevex-sr-manager-cybersecurity"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/aevex-sr-manager-cybersecurity\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Faevex-sr-manager-cybersecurity"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3494784}},{"tool":"search_jobs","arguments":{"company":"aevex.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3494784},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}