Sr. Manager - Cybersecurity
Aevex Aerospace · Tampa, Florida, United States · hybrid
Work Arrangement
This is a hybrid position located in Tampa, FL with up to 20% of required travel.
Job Overview
The Senior Manager - Cybersecurity will lead cybersecurity across enterprise IT and defense program environments, combining strong technical expertise with effective people management and a collaborative leadership style. This leader will manage a team responsible for cloud security, infrastructure security, vulnerability management, and endpoint management, while working closely with Engineering leadership and program technical leads to secure development environments, engineering networks, source code repositories, CI/CD pipelines, and software delivery pathways supporting embedded systems and airborne platforms.
This is a hands-on leadership role requiring someone who can evaluate architectures, troubleshoot complex technical issues, and guide technical teams while communicating clearly with executives, program leaders, and business partners. The ideal candidate brings cybersecurity management experience within aerospace, defense, or the Defense Industrial Base, with demonstrated success securing enterprise infrastructure, engineering environments, and the movement of software from development through deployment.
The GCC-High Microsoft technology environment includes CrowdStrike, Zscaler, ThreatLocker, NinjaOne, Microsoft Intune, GitLab, AWS, Azure, and self-hosted AI solutions.
Essential Functions
- Team Leadership and Strategy
- Lead, mentor, and develop a technical team spanning cloud security, infrastructure security, vulnerability management, and endpoint management.
- Establish clear priorities, accountability, and professional development plans while balancing enterprise needs, program delivery, and available resources.
- Develop and execute a cybersecurity roadmap aligned with business objectives, defense program requirements, and organizational risk.
- Manage cybersecurity initiatives, resource planning, vendor relationships, and associated budgets.
- Communicate cybersecurity risks, priorities, and investment needs in practical terms that support informed decisions.
- Build strong working relationships across IT, Engineering, program management, compliance, and business leadership.
- Enterprise Cybersecurity and Core Technologies
- Direct security architecture and operations across cloud platforms, identity systems, networks, servers, and endpoints.
- Oversee the configuration, integration, and effectiveness of CrowdStrike for endpoint protection, threat detection, investigation, and response.
- Guide the use of Zscaler to protect access and traffic across enterprise, cloud, and engineering environments.
- Oversee ThreatLocker application control and privilege management to reduce unauthorized software execution and excessive permissions.
- Lead endpoint configuration, patching, security, and compliance practices using NinjaOne and Microsoft Intune, establishing clear ownership and consistent coverage.
- Direct security architecture across AWS and Azure, including identity and access management, network segmentation, logging, workload protection, and secure configuration.
- Oversee vulnerability identification, prioritization, remediation, and validation across Windows, Linux, cloud, and supporting infrastructure.
- Lead incident response coordination, technical investigations, recovery activities, and resulting security improvements.
- Establish meaningful metrics to measure security effectiveness, remediation progress, and operational performance.
- Defense Programs and Engineering Environments
- Lead cybersecurity efforts supporting engineering development environments, defense programs, embedded Linux systems, and airborne platforms.
- Partner with Engineering leadership and program technical leads to incorporate cybersecurity throughout the software and systems development, deployment, and sustainment lifecycle.
- Lead the assessment, standardization, and security improvement of development environment connectivity, including engineering workstations, repositories, build systems, test environments, and supporting network pathways.
- Secure the flow of source code and software artifacts from repositories through build pipelines, testing, release, and deployment onto aircraft and other mission platforms.
- Partner with Engineering to secure GitLab repositories, runners, CI/CD pipelines, secrets, dependencies, and software artifacts.
- Establish controls for repository access, build environments, artifact integrity, release authorization, and deployment traceability.
- Identify and reduce cybersecurity risks associated with development workflows, inter environment connectivity, tooling integrations, and software distribution mechanisms.
- Evaluate and secure interfaces and data flows between enterprise systems, engineering October 19, 2026 Version: 3 Created By: Mary Nolan Created By: Mary Nolan October 19, 2026 Version: 3 environments, cloud services, ground systems, and deployed platforms.
- Guide embedded Linux system hardening, vulnerability assessment, secure configuration, and remediation within mission performance and operational constraints.
- Support program-specific security requirements, customer reviews, and assessment or authorization activities as applicable.
- Self-Hosted AI Security
- Partner with Engineering and IT to assess, deploy, and secure self-hosted AI solutions supporting business and program needs.
- Establish security requirements for AI hosting infrastructure, model access, sensitive data handling, integrations, logging, and vulnerability management.
- Evaluate risks associated with model and software provenance, sensitive data exposure, prompt injection, and AI-connected tools.
- Ensure AI deployments follow established access, change management, and data protection practices.
- Governance, Risk, and Compliance
- Maintain security policies, standards, procedures, and technical controls that support contractual and regulatory requirements.
- Partner with compliance, finance, and internal audit teams to support CMMC readiness and SOX IT controls.
- Translate compliance requirements into sustainable technical and operational practices.
- Ensure security practices produce consistent evidence, including access reviews, change approvals, vulnerability remediation records, and configuration documentation.
- Oversee recurring security activities, including risk assessments, incident response exercises, configuration reviews, and firewall and privileged access reviews.
- Track security findings and corrective actions through resolution, escalating material risks and resource needs to leadership.
- Coordinate with customers, assessors, auditors, and external security partners as needed.
- Perform other duties as required.
Standard Essential Functions
- Regular and reliable attendance on a full time basis [or in accordance with posted schedule].
- Responsible for exhibiting professional behavior with both internal and external business associates that reflects positively on the company and is consistent with the company's policies and practices.
- Embodies AEVEX’s cultural values and aligns daily actions with department goals and company culture.
Qualifications and Competencies
- Proven ability to lead and develop technical teams while remaining hands-on
- Solid understanding of security best practices including vulnerability management, system hardening, and access control
- Strong troubleshooting, problem-solving, and decision-making skills
- Excellent communication and cross-functional collaboration abilities
- Familiarity with defense program cybersecurity requirements, the Risk Management Framework (RMF), and system assessment and authorization processes.
- Familiarity with secure boot, code signing, software bills of materials, dependency analysis, and software supply chain security.
- Ability to evaluate security tool confi