The ad says“Experience with CUI, classified systems, SCIFs, or other high-assurance environments”
The ad says“Familiarity with relevant government and industry security frameworks, such as NIST 800-171, CMMC, SOC 2, ISO 27001, GDPR or EU AI”
The ad says“Strong understanding of security architecture, risk management, security operations, privacy and compliance requirement and incident response”
The ad says“Experience with CUI, classified systems, SCIFs, or other high-assurance environments”
The ad says“Familiarity with relevant government and industry security frameworks, such as NIST 800-171, CMMC, SOC 2, ISO 27001, GDPR or EU AI”
The ad says“Familiarity with relevant government and industry security frameworks, such as NIST 800-171, CMMC, SOC 2, ISO 27001, GDPR or EU AI”
The ad says“Strong understanding of security architecture, risk management, security operations, privacy and compliance requirement and incident response”
The ad says“Familiarity with relevant government and industry security frameworks, such as NIST 800-171, CMMC, SOC 2, ISO 27001, GDPR or EU AI”
The ad says“Familiarity with relevant government and industry security frameworks, such as NIST 800-171, CMMC, SOC 2, ISO 27001, GDPR or EU AI”
The ad says“Strong understanding of security architecture, risk management, security operations, privacy and compliance requirement and incident response”
The ad says“Strong understanding of security architecture, risk management, security operations, privacy and compliance requirement and incident response”
The ad says“Experience with CUI, classified systems, SCIFs, or other high-assurance environments”
The ad says“Strong understanding of security architecture, risk management, security operations, privacy and compliance requirement and incident response”
The ad says“Strong understanding of security architecture, risk management, security operations, privacy and compliance requirement and incident response”
The ad says“Familiarity with relevant government and industry security frameworks, such as NIST 800-171, CMMC, SOC 2, ISO 27001, GDPR or EU AI”
Code Metal is looking for a Head of Security to lead, mature, and scale our existing security program as the company grows
This person will own security strategy and technical direction across our products, offerings, infrastructure, corporate systems, and development environments
You will work closely with engineering, IT, legal, compliance, our FSO, and company leadership to ensure our security posture meets the needs of defense, government, and enterprise customers
Own and evolve Code Metal’s cybersecurity strategy, priorities, and roadmap
Lead security across our products, infrastructure, corporate systems, and development environments
Partner with engineering teams to establish practical security architecture, standards, and controls
Oversee core security operations, including identity and access management, vulnerability management, monitoring, and incident response
Lead product security and ensure security is integrated throughout the software development lifecycle
Own the security aspects of regulatory, compliance, and customer requirements
Partner with our FSO and technical teams on cybersecurity requirements for CUI and classified environments
Partner with Legal, the FSO, and Operations to translate regulatory, contractual, and customer security requirements
Benefits
Relocation assistance for qualifying employees
Health Care Plan (Medical, Dental & Vision)
Retirement Plan (401k, IRA)
Flexible hybrid work arrangement
Paid Time Off (Uncapped Vacation, plus Sick & Public Holidays)
Preferred experience
This is a senior leadership role for someone who is technically strong, comfortable making risk-based decisions, and able to operate effectively with engineers, executives, customers, and government partners
Broad technical depth across product, cloud, infrastructure, and enterprise security
Strong understanding of security architecture, risk management, security operations, privacy and compliance requirement and incident response
10+ years of cybersecurity and compliance experience with meaningful security leadership responsibility
Experience owning or significantly maturing security programs within highly technical organizations
Experience working closely with engineering organizations and influencing technical decisions
U.S. citizenship and ability to obtain and maintain a U.S. government security clearance
Strong judgment and the ability to communicate security risks and priorities to technical and non-technical audiences
Experience supporting defense, government, or other highly regulated customers
Experience with CUI, classified systems, SCIFs, or other high-assurance environments
Experience with moving into new markets and jurisdictions and understanding the compliance requirements for new regions
Familiarity with relevant government and industry security frameworks, such as NIST 800-171, CMMC, SOC 2, ISO 27001, GDPR or EU AI
Experience securing modern cloud-native and AI-enabled products
