Program Security Manager

About the Role

We are looking for a Program Security Manager to turn Government-approved Security Classification Guides (SCGs), DD Forms 254, and related guidance into clear, practical rules for technical work. You will work directly with Mechanical, Electrical, Software, and Systems Engineering leaders to apply classification requirements to designs, CAD, circuits, firmware, source code, analyses, and test data, and resolve unclear cases with authorized Government representatives. You will also coordinate reviews of Lawful Permanent Resident (LPR) contributions under our Quality Management Plan (QMP) with qualified designated technical reviewers. Hands-on software engineering experience and technical classification-management expertise are essential.

This role reports to the Senior Management Official (SMO), with day-to-day priorities coordinated with the VP of Legal and VP of Program Management. You will work closely with Engineering, the Facility Security Officer (FSO), Quality, IT/Cybersecurity, Contracts, and Export Compliance.

Key Responsibilities

Security Classification & Engineering Integration

• Lead the interpretation and application of Government-issued SCGs, DD Forms 254, and other approved classification guidance to GITAI’s technical work. Maintain internal guidance traceable to those sources.
• Partner with engineering leaders to assess what information is disclosed by designs, software, interfaces, specifications, simulations, manufacturing data, and test results; establish appropriate classification, markings, handling, and segregation requirements.
• Participate in technical and design reviews to identify classification questions early, including issues involving aggregation, compilation, release, and transfer of technical information.
• Coordinate unresolved classification questions with the Government Program Security Officer (PSO) or other authorized Government representatives. Document guidance, decisions, and follow-up actions.
• Build simple, repeatable workflows for classified and unclassified data that let engineers move quickly while meeting classification, access-control, marking, and pre-release review requirements. Prevent information spills and train personnel on their responsibilities.

QMP Review of LPR Contributions

• Coordinate implementation of the QMP “Quality Review of LPR Contributions” process for covered software, firmware, scripts, configuration and build files, hardware and circuit designs, programmable logic, drawings, specifications, analyses, test results, and related components.
• Work with the SMO and Engineering to ensure reviews are carried out by appropriately cleared U.S. citizen employees with need-to-know, relevant technical competence, and written designation by the SMO.
• Coordinate the use of SMO-approved review procedures and tools addressing technical accuracy, contract conformance, unauthorized functionality, and confirmation that contributions are unclassified and prepared without access to classified information.
• Work with designated technical reviewers and IT/Engineering on source-code review, static and software-composition analysis, testing, configuration control, build integrity, and documented acceptance before contributions enter the Program baseline.
• Ensure reviews remain independent of LPR direction or approval, that review standards and tools are SMO-approved, and that feedback to LPR personnel remains unclassified. Coordinate with Engineering and IT to protect the Program baseline and build environment as required by the QMP.
• Ensure review findings, author attribution, corrective actions, and acceptance records are captured; coordinate security concerns or suspected classified content promptly with the FSO and SMO. The FSO retains oversight of record retention and required reporting.
• Personally conduct software-related technical reviews only when technically qualified and formally designated. Mechanical, electrical, and other domain-specific technical reviews remain with suitably qualified designated reviewers.

Security Program Framework & Compliance

• Work with the FSO, Legal, Engineering, Quality, and IT/Cybersecurity to implement relevant classified-information, CUI, technology-control, and FOCI mitigation procedures, including applicable QMP, AOP, TCP, and ECP requirements.
• Support DCSA and Government security reviews, internal training, incident-response coordination, and ongoing improvements to classification and technical-information protection procedures.
• Support program and stakeholder coordination as needed, without primary ownership of program cost, schedule, or portfolio delivery.

Classification activities must follow applicable U.S. Government classification authority and guidance. This position does not confer Original Classification Authority or permit independent classification decisions outside authorized derivative classification procedures.

Required Qualifications

• Bachelor's degree or higher in Computer Science, Computer Engineering, Software Engineering, Electrical Engineering, or another closely related STEM field.
• Hands-on professional experience in software engineering, including developing, integrating, or reviewing software, embedded software, or firmware.
• Demonstrated experience interpreting and applying U.S. Government Security Classification Guides (SCGs) to engineering data, such as source code, hardware designs, technical specifications, or test results, in classified U.S. Government or DoD programs.
• Experience working directly with engineering teams and Government security representatives to resolve technical classification questions.
• Working knowledge of DD Form 254, NISP, classified information, and CUI requirements, with experience developing practical security procedures, training, and auditable processes.
• Professional experience at a venture capital-backed startup, regardless of funding stage. Past or current employment qualifies.

Preferred Qualifications

• Experience in spacecraft, satellites, defense systems, missile defense, sensors, robotics, or complex hardware/software development.
• Experience building or improving classification and technical-information security processes at an aerospace or defense startup.
• Experience administering FOCI mitigation requirements, Quality Management Plans, or independent reviews of engineering contributions.
• Experience with code review, secure development and build processes, static code analysis, software composition analysis, configuration management, or technical integrity testing.
• Background as a Program Security Manager, CPSO, Classification Management Specialist, Industrial Security Specialist, or comparable role.
• Broader program management, Government customer coordination, and cross-functional stakeholder management experience.

Security Clearance & Export-Control Requirements

• Must be a U.S. citizen and eligible to obtain and maintain the U.S. Government security clearance required for the Program.
• Active Secret clearance or higher strongly preferred given near-term classified program requirements.
• Must be able to comply with all requirements applicable to classified information, CUI, and export-controlled technical data. QMP Designated Reviewer duties, if assigned, also require the applicable clearance, need-to-know, technical competence, and written SMO designation.

Location & Employment Details

• Torrance, CA / Full-time, Exempt
• This is a full-time onsite role based at GITAI’s office in Torrance, CA. This position requires working onsite five days per week. Remote or hybrid work is not expected for this role.
• Limited travel may be required based on business needs, including customer, partner, vendor, or company-related meetings.

Compensation

Base salary for this role is expected to range from $145,000 to $185,000 per year, depending on experience and qualifications.

Benefits

• Health Insurance – Platinum medical plan with 100% company-paid medical, dental, and vision coverage for employees; 90% for dependents
• 401(k) Plan – Company match up to 3.5%, with traditional and Roth options
• Equity – Stock option eligibility depending on role
• Relocation Support – Available for qualifying positions
• Time Off – 12 paid holidays per year, 12 days of paid vacation per year, and paid sick leave (in accordance with applicable law)
• Office Perks – Free snacks and drinks, plus regular team events

GITAI does not accept unsolicited resumes from staffing or recruiting agencies. We work only with recruiting partners that have been specifically engaged by GITAI. No fees will be paid for resumes submitted without a prior agreement.