Senior Manager, Enterprise Security

About the role

Space is a warfighting domain. True Anomaly seeks those with the talent and ambition to build the technology that secures it.

Benefits & Perks*

• Best-in-class healthcare: 100% company-paid medical, dental, and vision coverage for you and your dependents, with HSA/HRA options
• Generous time off: Flexible Time Off (FTO) for exempt employees, accrued PTO of up to 25 days for non-exempt employees, plus 12 paid holidays; Parental Leave; Sick Leave
• Fuel for your day: Daily catered lunch and unlimited snacks for in-office employees
• And more: 401(k) retirement plan, fitness reimbursement, and Dog Fridays
• Equity participation: Equity is included as part of our total compensation package, giving you an opportunity to share in the company's success.

*Do not apply to fixed term and temporary roles

Your Mission

As the Senior Manager of Enterprise Security, you will lead the team responsible for securing the foundations that allow True Anomaly to fulfill its missions. In this position, you will build, mentor, and lead a team of security engineers spanning enterprise security, vulnerability management, and Linux security, ensuring we are building security directly into the foundations of our company while aligning with compliance requirements. You will regularly be faced with answering the question "How can we enable the business to operate with as little risk as necessary?" and empowering your team to answer it too.

As the leader of True Anomaly's Enterprise Security team, you will set strategy and priorities across a broad portfolio: enterprise identity, endpoint and server hardening, cloud security, vulnerability management, and Linux fleet security. You will translate business needs into a coherent security roadmap, remove blockers for your engineers, and represent the team to senior leadership. You will be joining a fast-paced, challenging environment where your leadership will have direct, lasting impact on our overall security posture.

• This is an ideal role for a leader who has grown as both a hands-on technical contributor and a people manager, who is energized by developing engineers, and who wants to build a high-performing security function from the ground up.
• This position requires the ability to obtain and maintain a security clearance.

Responsibilities

Team Leadership & Development

• Hire, coach, mentor, and grow a team of enterprise security, vulnerability management, and Linux security engineers.
• Set clear goals, provide regular feedback, and support career development and growth planning for direct reports.
• Foster a collaborative, high-ownership team culture that thrives under fast-paced, high-stakes conditions.
• Manage on-call rotations and ensure the team is prepared to respond effectively during active security incidents.

Strategy & Program Ownership

• Define and drive the enterprise security roadmap across workstations, servers, cloud environments, and the Linux fleet.
• Own the maturity and effectiveness of the vulnerability management program, including SLA adherence and risk-based prioritization.
• Set direction for Operational technology (OT) security, enterprise identity, access management, and configuration management strategy, including Linux-specific identity and hardening initiatives.
• Proactively identify gaps across the security program and prioritize resourcing to close them.

Cross-Functional Partnership

• Partner with IT, DevOps, engineering, and manufacturing/OT stakeholders to embed security into the system development lifecycle and infrastructure-as-code workflows.
• Represent the Enterprise Security team in change management and change review board processes, ensuring risks are identified and communicated.
• Serve as an escalation point for cross-functional security questions and incidents.
• Communicate security posture, metrics, and risk to technical and executive audiences.

Technical Oversight

• Provide technical guidance and review for major initiatives such as centralized identity architecture, security hardening baselines (CIS/STIG), SIEM/detection strategy, and cloud security posture management.
• Stay current with the evolving threat landscape and emerging security tooling to inform team priorities.
• Support compliance efforts (e.g. CMMC, NIST) by ensuring the team produces necessary evidence and documentation.

Required Qualifications

• 5+ years of experience directly managing security engineering teams, including hiring, performance management, and career development.
• 7+ years of total experience in information security or a related technical field, including significant time as a hands-on individual contributor.
• Demonstrated experience building or maturing one or more of the following: enterprise security programs, vulnerability management programs, Operational technology (OT) security, or Linux/enterprise identity security.
• Strong technical understanding of enterprise and cloud technologies (on-prem and SaaS), common vulnerabilities and attack vectors, and security tooling such as SIEM, IDS/IPS, vulnerability scanners, MDM, and endpoint protection.
• Working knowledge of at least one programming or scripting language (e.g., Python, Go, Bash, Rust).
• Proven ability to translate business priorities into technical security strategy and communicate that strategy across all levels of an organization.
• Excellent analytical, problem-solving, organizational, and communication skills.
• Experience leading teams through active security incidents and on-call operations.
• Relevant certifications such as CISSP, CISM, CISA, or equivalents are a plus.

Preferred Qualifications

• Experience managing teams in a startup, Series C through E, or similarly high-growth environment.
• Active security clearance or defense industry experience.
• Bachelor's degree in Computer Science, Information Security, or equivalent professional experience.
• Experience securing manufacturing or operational technology (OT) environments.
• Experience with cloud platforms such as Azure, AWS, or Google Cloud.
• Familiarity with infrastructure-as-code paradigms, Terraform, GitOps, CI/CD.
• Familiarity with CMMC, and NIST frameworks.
• Experience with Linux security architecture, configuration management at scale, or privileged access management tooling.
• Experience building or scaling a vulnerability management function.

Compensation

• Denver, Colorado Base Salary: $165,000-$240,000
• Long Beach, California Base Salary: $170,000-$250,000
• Equity + Benefits including Health, Dental, Vision, HRA/HSA options, PTO and paid holidays, 401K, Parental Leave

Your actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, location, and experience.

Work Environment

• This position will be based onsite in either our Denver, CO or Long Beach, CA offices. #LI-ONSITE
• This role operates in a fast-paced, high-stakes environment where adaptability and rapid decision-making are essential.
• On-call rotation oversight, including after-hours participation, is required in this role.
• Must be comfortable leading a team under pressure during active security incidents.
• High degree of autonomy and ownership over the enterprise security function.
• Direct access to leadership and significant opportunity to influence security strategy.

What We Offer

• Competitive salary commensurate with experience and clearance level
• Opportunity to drive security posture for cutting-edge space systems with national security impact
• Professional development support including conferences, training, and security certifications
• Collaborative culture working alongside spacecraft engineers, mission operators, and experienced security professionals

To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR), you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State.

To protect candidates and our company from application fraud and impersonation, we use third-party tools to verify applicant identity and detect fraudulent applications. Learn more in our Privacy Notice.