Program Security Manager

Who We Are

GITAI is a vertically integrated space and defense company building the next generation of hardware for low-Earth-orbit missions.

At our core is the space robotics technology that has defined GITAI from the beginning. A small, highly capable engineering team applies that foundation across satellite buses, in-orbit servicing robotics, and mission hardware for applications such as Earth observation. Today, a major focus of our work is supporting U.S. national security missions, particularly through proliferated LEO satellite constellations and other next-generation space systems.

We design, build, integrate, and test much of our hardware in-house. Electrical, mechanical, software, manufacturing, integration, and test teams work closely together, allowing a small team to own complete systems rather than isolated components. This vertical integration helps us move quickly, learn directly from hardware, and shorten the path from architecture to a working system.

We are still early. The systems, the company, and the market are all being built at the same time. Requirements change, technical problems are often ambiguous, and many answers do not yet exist. We are looking for exceptional engineers and operators who want broad ownership, can work across disciplines, and are willing to stay close to the hardware until the mission succeeds.

About the Role

We are looking for a Program Security Manager to turn Government-approved Security Classification Guides (SCGs), DD Forms 254, and related guidance into clear, practical rules for technical work. You will work directly with Mechanical, Electrical, Software, and Systems Engineering leaders to apply classification requirements to designs, CAD, circuits, firmware, source code, analyses, and test data, and resolve unclear cases with authorized Government representatives. You will also coordinate reviews of Lawful Permanent Resident (LPR) contributions under our Quality Management Plan (QMP) with qualified designated technical reviewers. Hands-on software engineering experience and technical classification-management expertise are essential.

This role reports to the Senior Management Official (SMO), with day-to-day priorities coordinated with the VP of Legal and VP of Program Management. You will work closely with Engineering, the Facility Security Officer (FSO), Quality, IT/Cybersecurity, Contracts, and Export Compliance.

Key Responsibilities

Security Classification & Engineering Integration

Lead the interpretation and application of Government-issued SCGs, DD Forms 254, and other approved classification guidance to GITAI’s technical work. Maintain internal guidance traceable to those sources.

Partner with engineering leaders to assess what information is disclosed by designs, software, interfaces, specifications, simulations, manufacturing data, and test results; establish appropriate classification, markings, handling, and segregation requirements.

Participate in technical and design reviews to identify classification questions early, including issues involving aggregation, compilation, release, and transfer of technical information.

Coordinate unresolved classification questions with the Government Program Security Officer (PSO) or other authorized Government representatives. Document guidance, decisions, and follow-up actions.

Build simple, repeatable workflows for classified and unclassified data that let engineers move quickly while meeting classification, access-control, marking, and pre-release review requirements. Prevent information spills and train personnel on their responsibilities.

QMP Review of LPR Contributions

Coordinate implementation of the QMP “Quality Review of LPR Contributions” process for covered software, firmware, scripts, configuration and build files, hardware and circuit designs, programmable logic, drawings, specifications, analyses, test results, and related components.

Work with the SMO and Engineering to ensure reviews are carried out by appropriately cleared U.S. citizen employees with need-to-know, relevant technical competence, and written designation by the SMO.

Coordinate the use of SMO-approved review procedures and tools addressing technical accuracy, contract conformance, unauthorized functionality, and confirmation that contributions are unclassified and prepared without access to classified information.

Work with designated technical reviewers and IT/Engineering on source-code review, static and software-composition analysis, testing, configuration control, build integrity, and documented acceptance before contributions enter the Program baseline.

Ensure reviews remain independent of LPR direction or approval, that review standards and tools are SMO-approved, and that feedback to LPR personnel remains unclassified. Coordinate with Engineering and IT to protect the Program baseline and build environment as required by the QMP.

Ensure review findings, author attribution, corrective actions, and acceptance records are captured; coordinate security concerns or suspected classified content promptly with the FSO and SMO. The FSO retains oversight of record retention and required reporting.

Personally conduct software-related technical reviews only when technically qualified and formally designated. Mechanical, electrical, and other domain-specific technical reviews remain with suitably qualified designated reviewers.

Security Program Framework & Compliance

Work with the FSO, Legal, Engineering, Quality, and IT/Cybersecurity to implement relevant classified-information, CUI, technology-control, and FOCI mitigation procedures, including applicable QMP, AOP, TCP, and ECP requirements.

Support DCSA and Government security reviews, internal training, incident-response coordination, and ongoing improvements to classification and technical-information protection procedures.

Support program and stakeholder coordination as needed, without primary ownership of program cost, schedule, or portfolio delivery.

Classification activities must follow applicable U.S. Government classification authority and guidance. This position does not confer Original Classification Authority or permit independent classification decisions outside authorized derivative classification procedures.

Required Qualifications

Bachelor's degree or higher in Computer Science, Computer Engineering, Software Engineering, Electrical Engineering, or another closely related STEM field.

Hands-on professional experience in software engineering, including developing, integrating, or reviewing software, embedded software, or firmware.

Demonstrated experience interpreting and applying U.S. Government Security Classification Guides (SCGs) to engineering data, such as source code, hardware designs, technical specifications, or test results, in classified U.S. Government or DoD programs.

Experience working directly with engineering teams and Government security representatives to resolve technical classification questions.

Working knowledge of DD Form 254, NISP, classified information, and CUI requirements, with experience developing practical security procedures, training, and auditable processes.

Professional experience at a venture capital-backed startup, regardless of funding stage. Past or current employment qualifies.

Preferred Qualifications

Experience in spacecraft, satellites, defense systems, missile defense, sensors, robotics, or complex hardware/software development.

Experience building or improving classification and technical-information security processes at an aerospace or defense startup.

Experience administering FOCI mitigation requirements, Quality Management Plans, or independent reviews of engineering contributions.

Experience with code review, secure development and build processes, static code analysis, software composition analysis, configuration management, or technical integrity testing.

Backgrou