Security Manager

Summary

Join Slingshot Aerospace as a Security Manager and become a hands-on member of the team, driving automation-first security strategies and ensuring compliance with various frameworks like CMMC, FedRAMP, and government security requirements. This role demands a blend of technical expertise and strategic oversight, securing our global organization with modern, scalable, and automated security solutions. You will implement and enforce Zero Trust principles, automate security processes, design and manage security controls, and collaborate with various teams. A deep understanding of Zero Trust architecture, security automation, and compliance frameworks is crucial. The position offers a competitive salary and remote work options.

Requirements

• Be eligible to obtain or maintain US Government Security Clearance
• Possess deep knowledge of Zero Trust architecture, modern security automation, and compliance frameworks (CMMC, FedRAMP, NIST 800-171, ISO 27001, CIS, etc.)
• Have hands-on experience with security technologies such as Okta, Microsoft Entra ID, CrowdStrike, Defender, MDM solutions, SIEM, SOAR, Zscaler and cloud security platforms
• Have 5+ years of experience automating security processes, including identity lifecycle management, compliance reporting, and threat detection
• Possess a strong understanding of government security requirements and working with compliance frameworks for federal contracts
• Be able to balance technical security execution with regulatory compliance while keeping systems scalable and secure
• Have familiarity with DevSecOps practices, IaC, and security automation tools such as Terraform, Ansible, or scripting languages (Python, PowerShell)
• Have a 4-year degree in computer science, information technology, related field, or equivalent work experience
• Possess a strong ability to read and write code in Python, Golang, or similar languages for security automation and workflow development

Responsibilities

• Implement and enforce Zero Trust principles, ensuring least privilege, continuous authentication, and endpoint security across the environment
• Automate security processes to reduce manual effort and improve efficiency in identity management, compliance tracking, and incident response
• Design and manage security controls for CMMC, FedRAMP, NIST 800-171, and other regulatory frameworks, ensuring ongoing compliance
• Work closely with government agencies and compliance teams to maintain security standards for government-related operations
• Deploy and manage IAM, endpoint security, cloud security, and identity governance tools, integrating them into automated security workflows
• Establish continuous monitoring, logging, and alerting, leveraging SIEM, SOAR, and EDR solutions to detect and mitigate threats proactively
• Partner with IT and Engineering teams to embed security best practices into DevSecOps and infrastructure as code (IaC)
• Conduct risk assessments, audits, and vulnerability scans, driving remediation efforts through automated reporting and tracking
• Provide security awareness training and enforce security policies through automated compliance enforcement mechanisms
• Perform other duties as assigned (to be less than 10% of the responsibilities listed above)

Preferred Qualifications

• Possess relevant certifications such as CISSP, CISM, or CRISC
• Possess strong verbal and written communication skills to effectively communicate security risk and requirements to stakeholders at all levels of the organization
• Possess excellent analytical and problem-solving skills to identify and creatively neutralize cybersecurity issues

Benefits

• Remote work
• Annual Compensation: $141,000 - $205,000