Program Security Manager

Who We Are

GITAI is a vertically integrated U.S. defense space company delivering scalable LEO satellite constellation platforms for missile defense, maneuverable space combat power, and observation missions. Selected as a Prime Contractor for the U.S. Space Force's missle defense program, GITAI develops all critical technologies in-house, including solid rocket motors (SRMs), thrust divert and attitude control systems (TDACS), discrimination algorithms, onboard computers, and infrared seekers. We're bringing the speed, agility, and vertically integrated engineering approach of other industries into defense space to disrupt traditional defense primes.

About the Role

We are looking for a Program Security Manager to turn Government-approved Security Classification Guides (SCGs), DD Forms 254, and related guidance into clear, practical rules for technical work. You will work directly with Mechanical, Electrical, Software, and Systems Engineering leaders to apply classification requirements to designs, CAD, circuits, firmware, source code, analyses, and test data, and resolve unclear cases with authorized Government representatives. You will also coordinate reviews of Lawful Permanent Resident (LPR) contributions under our Quality Management Plan (QMP) with qualified designated technical reviewers. Hands-on software engineering experience and technical classification-management expertise are essential.

This role reports to the Senior Management Official (SMO), with day-to-day priorities coordinated with the VP of Legal and VP of Program Management. You will work closely with Engineering, the Facility Security Officer (FSO), Quality, IT/Cybersecurity, Contracts, and Export Compliance.

Key Responsibilities

Security Classification & Engineering Integration

• Lead the interpretation and application of Government-issued SCGs, DD Forms 254, and other approved classification guidance to GITAI’s technical work. Maintain internal guidance traceable to those sources.

• Partner with engineering leaders to assess what information is disclosed by designs, software, interfaces, specifications, simulations, manufacturing data, and test results; establish appropriate classification, markings, handling, and segregation requirements.

• Participate in technical and design reviews to identify classification questions early, including issues involving aggregation, compilation, release, and transfer of technical information.

• Coordinate unresolved classification questions with the Government Program Security Officer (PSO) or other authorized Government representatives. Document guidance, decisions, and follow-up actions.

• Build simple, repeatable workflows for classified and unclassified data that let engineers move quickly while meeting classification, access-control, marking, and pre-release review requirements. Prevent information spills and train personnel on their responsibilities.

QMP Review of LPR Contributions

• Coordinate implementation of the QMP “Quality Review of LPR Contributions” process for covered software, firmware, scripts, configuration and build files, hardware and circuit designs, programmable logic, drawings, specifications, analyses, test results, and related components.

• Work with the SMO and Engineering to ensure reviews are carried out by appropriately cleared U.S. citizen employees with need-to-know, relevant technical competence, and written designation by the SMO.

• Coordinate the use of SMO-approved review procedures and tools addressing technical accuracy, contract conformance, unauthorized functionality, and confirmation that contributions are unclassified and prepared without access to classified information.

• Work with designated technical reviewers and IT/Engineering on source-code review, static and software-composition analysis, testing, configuration control, build integrity, and documented acceptance before contributions enter the Program baseline.

• Ensure reviews remain independent of LPR direction or approval, that review standards and tools are SMO-approved, and that feedback to LPR personnel remains unclassified. Coordinate with Engineering and IT to protect the Program baseline and build environment as required by the QMP.

• Ensure review findings, author attribution, corrective actions, and acceptance records are captured; coordinate security concerns or suspected classified content promptly with the FSO and SMO. The FSO retains oversight of record retention and required reporting.

• Personally conduct software-related technical reviews only when technically qualified and formally designated. Mechanical, electrical, and other domain-specific technical reviews remain with suitably qualified designated reviewers.

Security Program Framework & Compliance

• Work with the FSO, Legal, Engineering, Quality, and IT/Cybersecurity to implement relevant classified-information, CUI, technology-control, and FOCI mitigation procedures, including applicable QMP, AOP, TCP, and ECP requirements.

• Support DCSA and Government security reviews, internal training, incident-response coordination, and ongoing improvements to classification and technical-information protection procedures.

• Support program and stakeholder coordination as needed, without primary ownership of program cost, schedule, or portfolio delivery.

Classification activities must follow applicable U.S. Government classification authority and guidance. This position does not confer Original Classification Authority or permit independent classification decisions outside authorized derivative classification procedures.

Required Qualifications

• Bachelor's degree or higher in Computer Science, Computer Engineering, Software Engineering, Electrical Engineering, or another closely related STEM field.

• Hands-on professional experience in software engineering, including developing, integrating, or reviewing software, embedded software, or firmware.

• Demonstrated experience interpreting and applying U.S. Government Security Classification Guides (SCGs) to engineering data, such as source code, hardware designs, technical specifications, or test results, in classified U.S. Government or DoD programs.

• Experience working directly with engineering teams and Government security representatives to resolve technical classification questions.

• Working knowledge of DD Form 254, NISP, classified information, and CUI requirements, with experience developing practical security procedures, training, and auditable processes.

• Professional experience at a venture capital-backed startup, regardless of funding stage. Past or current employment qualifies.

Preferred Qualifications

• Experience in spacecraft, satellites, defense systems, missile defense, sensors, robotics, or complex hardware/software development.

• Experience building or improving classification and technical-information security processes at an aerospace or defense startup.

• Experience administering FOCI mitigation requirements, Quality Management Plans, or independent reviews of engineering contributions.

• Experience with code review, secure development and build processes, static code analysis, software composition analysis, configuration management, or technical integrity testing.

• Background as a Program Security Manager, CPSO, Classification Management Specialist, Industrial Security Specialist, or comparable role.

• Broader program management, Government customer coordination, and cross-functional stakeholder management experience.

Security Clearance & Export-Control Requirements

• Must be a U.S. citizen and eligible to obtain and maintain the U.S. Government security clearance required for the Program.

• Active Secret clearance or higher strongly preferred given near-term classified program requirements.

…