Role: Senior Cybersecurity SME (Cryptography & PQC) (W2-Requirment)
Location: Irving, TX (Onsite)
Duration: Long Term
About the Role:
We are seeking a Senior Cybersecurity Subject Matter Expert with deep domain knowledge in enterprise encryption, Post-Quantum Cryptography (PQC) readiness, and cryptographic vulnerability analysis.
You will be the tip of the spear on a high-stakes AI-driven automation project.
Working securely on-site, you will analyze massive datasets of Cryptography Bill of Materials (CBOM) to identify vulnerability patterns across hundreds of legacy and modern applications.
You will serve as the critical intelligence bridge, translating raw security gaps into actionable technical patterns that our offsite AI engineering teams will use to build automated remediation agents.
What You Will Do:
Analyze Complex Security Data: Securely parse and analyze raw JSON/SBOM/CBOM scans (generated by tools like Sonatype and CBOM Kit) across an enterprise portfolio of ~128 applications.
Map Cryptographic Vulnerabilities: Identify critical deviations from target North Star standards, specifically mapping migrations from TLS 1.0/1.2 to TLS 1.3, weak ciphers to AES-256-GCM, and outdated SSH host keys to modern standards.
Identify Ecosystem Patterns: Group applications by their infrastructure characteristics and vulnerability signatures, factoring in complex constraints like hardware load balancers, IoT device memory limits, and legacy undocumented business rules.
Architect Characteristic Maps: Build comprehensive, sanitized technical mapping tables that define exactly what remediation templates need to be built by the offshore Cloud/AI team, ensuring zero proprietary vulnerability data leaves the secure network.
Drive PQC Readiness: Guide the structural transition logic for Post-Quantum Cryptography (PQC) readiness, focusing on hybrid TLS implementations and modern key management.
Must-Have Qualifications:
Senior-Level Expertise: Extensive, hands-on background in Cybersecurity, Cryptography, and Security Data Analysis.
Deep Cryptographic Knowledge: Absolute technical mastery of enterprise encryption protocols, including TLS 1.3, IKEv2 IPsec, AES-256, and modern PQC concepts (e.g., ML-KEM, ML-DSA).
Data Parsing Skills: High proficiency in parsing, querying, and analyzing raw security data logs (JSON, SBOM, CBOM formats) to extract actionable trends.
Legacy Infrastructure Acumen: Ability to understand and navigate the constraints of 10-to-20-year-old revenue-generating enterprise applications and hardware.
Security Clearance/Compliance: Must be eligible and willing to clear expedited enterprise security onboarding and work on-site under strict, zero-data-export handling protocols
