Senior Cryptography Security Analyst (PQC / TLS / CBOM).

Job Title: Senior Cybersecurity SME & Data Analyst (Cryptography)
Location: Irving, TX (Hybrid, 2–3 days onsite)
Employment Type: Contract, 12+ months (likely extension)
Pay Rate: [$XX–$XX/hr]

About the Role
We’re looking for a Senior Cybersecurity SME to be the primary source of crypto expertise for a cutting-edge AI remediation project. You’ll work in a highly secure environment, analyzing proprietary Cryptography Bill of Materials (CBOM) data across a large portfolio of legacy and modern applications. Your job is to turn raw security data into clear, actionable patterns that AI engineers can use to automate remediation at enterprise scale.

Key Responsibilities

• Parse and analyze raw JSON, SBOM, and CBOM vulnerability scans across complex enterprise applications.
• Identify critical gaps against modern encryption standards, including TLS migrations (1.0/1.2 to 1.3), cipher suite upgrades (AES-128 to AES-256-GCM), and SSH host key hardening.
• Map complex infrastructure characteristics, such as hardware load balancers and IoT constraints, to technical remediation requirements.
• Identify unencrypted secrets and keys in codebases, and design mappings for secure KMS integration.
• Group findings into repeatable remediation patterns, and write clear, structured guidance for AI and engineering teams.

Required Qualifications

• Senior-level expertise in cybersecurity, cryptography, and security data analysis.
• Deep technical mastery of enterprise encryption protocols, including TLS 1.3, IKEv2 IPsec, AES-256, and Post-Quantum Cryptography (PQC) standards (FIPS 203/204/205).
• High proficiency parsing and analyzing raw security data and logs (JSON, SBOM/CBOM formats such as CycloneDX and SPDX).
• Ability to clear expedited enterprise security onboarding and strictly follow secure data-handling protocols.

Preferred Qualifications

• Hands-on experience with cryptographic inventory or crypto-agility programs.
• Scripting for data analysis (Python, pandas, jq).
• Experience with KMS/HSM platforms (AWS KMS, Azure Key Vault, HashiCorp Vault).
• Familiarity with secrets-scanning tools (e.g., gitleaks, TruffleHog).
• Experience working alongside AI/ML or automation engineering teams.
• Relevant certifications (CISSP, CISM, OSCP, or similar).