SME - Cybersecurity

BOOST LLC is seeking a Senior SME - Cybersecurity to help advance the USSF Warp Core data platform. In this onsite role in El Segundo, CA, you will provide expert guidance to strengthen the organization’s security posture, reduce risk, and support compliance with applicable standards and governance requirements.

Role focus

You will evaluate system security controls, direct vulnerability and threat assessments, and advise on security frameworks and SDLC integration. The work includes producing clear assessment outputs and recommendations for senior leadership and stakeholders, while staying current on emerging threats, technologies, and regulations.

Key responsibilities

• Perform independent, in-depth evaluations of system security controls to support compliance and strong cybersecurity hygiene.
• Act as a technical authority for risk management, threat mitigation, and compliance strategies.
• Oversee vulnerability assessments, penetration testing, and threat modeling to identify gaps, assess risks, and recommend corrective actions.
• Assess and recommend security policies, frameworks, and standards aligned with NIST, ISO 27001, GDPR, and DoD RMF requirements.
• Partner with engineering, operations, and leadership to integrate security best practices into system and software development lifecycles (SDLC).
• Maintain an up-to-date security strategy by tracking emerging cybersecurity threats, technologies, and regulations.
• Mentor and train team members on cybersecurity practices and tools.
• Present security assessment reports, recommendations, and metrics to senior leadership and stakeholders.

Required qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, or a related field (or Master’s degree). Bachelor’s track requires 12+ years; Master’s track requires 10+ years.
• 12+ years of progressive experience as a cybersecurity engineer securing and assessing large scale or complex enterprise software efforts.
• 5+ years of commercial industry experience securing and assessing complex enterprise software projects.
• Advanced knowledge of threat analysis, vulnerability management, and incident response best practices.
• Knowledge reviewing the outputs from security tools, including SIEMs, firewalls, IDS/IPS, and endpoint protection solutions.
• Expert knowledge of security frameworks and compliance standards and regulations, including NIST, ISO 27001, GDPR, and DoD RMF.
• Detailed understanding and experience with IAM, encryption technologies, network/cloud security, and secure software development best practices.
• Proficiency conducting threat modeling and risk analysis to identify and mitigate vulnerabilities.
• Expert problem-solving and analytical skills for complex, large-scale security challenges.
• Excellent communication skills with leadership, stakeholders, development teams, and industry or academic communities.
• Ability to obtain and maintain a TS/SCI clearance and willingness to take a CI polygraph.

Technologies and frameworks

• NIST, ISO 27001, GDPR, DoD RMF
• SIEMs, firewalls, IDS/IPS, endpoint protection solutions
• Identity and access management (IAM), encryption technologies, network/cloud security
• SDLC, threat modeling

Preferred qualifications

• Certifications such as CISSP, CISM, CEH, GIAC, or CCSP.
• Experience securing government or defense-related systems and environments.
• Expertise in advanced threat detection, threat hunting, and forensic analysis.
• Knowledge of DevSecOps practices and integrating security into CI/CD pipelines.
• Familiarity with zero-trust architectures and AI-driven security technologies.
• Experience working in highly classified environments supporting the IC/DoD for operational missions.

Compensation and benefits

• Salary range: $200,000 - $300,000 per year, based on experience.
• Options for 100% company-paid medical, dental, and vision premiums.
• 401K Matching up to 6% with immediate 100% vesting.
• 25 days of PTO plus 10 federal holidays.