Offer summary

Qualifications:

Deep knowledge of Zero Trust architecture and compliance frameworks (CMMC, FedRAMP, NIST 800-171)., 5+ years of experience in automating security processes and managing security technologies., 4-year degree in computer science, information technology, or equivalent work experience., Strong coding skills in Python, Golang, or similar languages for security automation..

Key responsabilities:

Implement and enforce Zero Trust principles and security controls for compliance.

Automate security processes to enhance efficiency in identity management and incident response.

Collaborate with government agencies to maintain security standards for operations.

Conduct risk assessments and provide security awareness training to enforce policies.

Job description

What You’ll Do:

As a Security Manager with Slingshot, you will be a hands-on Security Manager who understands Zero Trust architecture and can drive automation-first security strategies while ensuring compliance with CMMC, FedRAMP, and government security requirements. This role blends technical execution with strategic oversight, helping secure our global organization with modern, scalable, and automated security solutions. Your technical ability is second only to your integrity and general passion for security and technology, promoting a culture of information security.

Slingshot Aerospace cares deeply about our commitment to company values, mission, and purpose. The core competencies we will be looking to identify include: intellectual agility, ability to develop innovative solutions, leadership, performance orientation, and industry expertise.

Position Responsibilities:

Implement and enforce Zero Trust principles, ensuring least privilege, continuous authentication, and endpoint security across the environment.
Automate security processes to reduce manual effort and improve efficiency in identity management, compliance tracking, and incident response.
Design and manage security controls for CMMC, FedRAMP, NIST 800-171, and other regulatory frameworks, ensuring ongoing compliance.
Work closely with government agencies and compliance teams to maintain security standards for government-related operations.
Deploy and manage IAM, endpoint security, cloud security, and identity governance tools, integrating them into automated security workflows.
Establish continuous monitoring, logging, and alerting, leveraging SIEM, SOAR, and EDR solutions to detect and mitigate threats proactively.
Partner with IT and Engineering teams to embed security best practices into DevSecOps and infrastructure as code (IaC).
Conduct risk assessments, audits, and vulnerability scans, driving remediation efforts through automated reporting and tracking.
Provide security awareness training and enforce security policies through automated compliance enforcement mechanisms.
Perform other duties as assigned (to be less than 10% of the responsibilities listed above)

Pre-Requisites

Must be eligible to obtain or maintain US Government Security Clearance

Minimum Requirements

Deep knowledge of Zero Trust architecture, modern security automation, and compliance frameworks (CMMC, FedRAMP, NIST 800-171, ISO 27001, CIS, etc.).
Hands-on experience with security technologies such as Okta, Microsoft Entra ID, CrowdStrike, Defender, MDM solutions, SIEM, SOAR, Zscaler and cloud security platforms.
5+ years of experience automating security processes, including identity lifecycle management, compliance reporting, and threat detection.
Strong understanding of government security requirements and working with compliance frameworks for federal contracts.
Ability to balance technical security execution with regulatory compliance while keeping systems scalable and secure.
Familiarity with DevSecOps practices, IaC, and security automation tools such as Terraform, Ansible, or scripting languages (Python, PowerShell).
4-year degree in computer science, information technology, related field, or equivalent work experience.
Strong ability to read and write code in Python, Golang, or similar languages for security automation and workflow development.

Preferred Skills

Relevant certifications such as CISSP, CISM, or CRISC
Strong verbal and written communication skills to effectively communicate security risk and requirements to stakeholders at all levels of the organization
Excellent analytical and problem-solving skills to identify and creatively neutralize cybersecurity issues

*These skills are guidelines, not hard and fast rules. You don’t have to meet every qualification listed. If your skills are transferable and you meet the minimum requirements, we encourage you to apply.

Location: Remote, US

Classification: Full-time Exempt

Annual Compensation: $141,000 - $205,000

US-based Candidates: we are currently only able to hire residents of the following U.S. states: AZ, CA, CO, DC, FL, GA, HI, IL, IN, KS, MD, MA, MI, MN, MO, MT, NV, NJ, NM, NY, NC, OR, RI, TN, TX, UT, VT, VA, WA, WV, and WI. We are unable to consider candidates residing in other U.S. states at this time.

Internationally-based Candidates: we are currently only able to hire residents of the following locations: United Kingdom. We are unable to consider candidates residing in other countries at this time.

Equity, Diversity & Inclusion are key to our success. We are an Equal Opportunity Employer and our employees are people with different strengths, experiences and backgrounds, who share a passion for creating a safer, more connected world. Diversity not only includes race and gender identity, but also age, disability status, veteran status, sexual orientation, religion and many other parts of one’s identity. All of our employee’s points of view are key to our success, and we embrace individuality.

Required profile