Malleum

QA Engineer

• Conduct web, network, mobile, and API penetration tests to identify vulnerabilities.
• Support team assessments, simulating real-world attack scenarios.
• Develop and execute custom exploits, scripts, and attack chains.
• Conduct source code reviews for security weaknesses in applications.
• Assess cloud security in AWS, Azure, and GCP, as well as containerized environments like Docker and Kubernetes.
• Collaborate with blue teams, SOC analysts, and developers to remediate findings.
• Write detailed technical reports and present findings to technical and non-technical stakeholders.
• Stay updated on zero-day vulnerabilities, APT tactics, and emerging threats.
• Participate in CTFs, security research, and bug bounty programs to refine skills.

Penetration Tester

Compliance

• Lead executive-level GRC advisory engagements for clients across space, aerospace, defense, government, and critical infrastructure
• Stand up and mature Cyber Resilience Programs at large enterprises
• Advise C-suite and board stakeholders on cyber risk posture, regulatory exposure, and strategic investment priorities
• Lead client journeys to CMMC (Cybersecurity Maturity Model Certification) readiness and certification
• Develop, operationalize, and audit programs aligned with NIST CSF 2.0, NIST 800-53/171, ISO 27001/27005, ITSG-33, SOC 2, and sector-specific frameworks
• Advise space-sector clients on emerging requirements such as Space ISAC guidance
• Define and implement enterprise risk management frameworks, KRIs/KPIs, risk appetite statements, and board reporting cadences
• Lead third-party / supply-chain risk programs aligned with defense industrial base (DIB) and allied requirements
• Shape Malleum's GRC service offerings, methodologies, accelerators, and intellectual property
• Mentor and develop senior managers, managers, and consultants
• Drive business development: trusted-advisor relationships, account growth, proposals, and thought leadership across the space, aerospace, and defense ecosystem
• Represent Malleum in industry forums, regulator engagements, client briefings, and executive roundtables

Executive Advisor – Governance, Risk and Compliance

Security Engineer

• Establish and mature Malleum's Cybersecurity Program Management Office (PMO), defining its charter, governance model, and operating cadence
• Standardize program and project delivery methodologies across the cybersecurity practice, harmonizing waterfall, agile, and hybrid approaches to client needs
• Develop and roll out playbooks, templates, and standard operating procedures (SOPs) for intake, scoping, risk management, change control, status reporting, and closeout
• Define and track portfolio-level KPIs, OKRs, and health metrics to give leadership real-time visibility into delivery performance, margin, and client outcomes
• Implement consistent resource management, capacity planning, and forecasting practices across concurrent engagements
• Build a centralized knowledge repository and lessons-learned program to accelerate ramp-up and embed continuous improvement
• Mentor and coach project managers and delivery leads, establishing career pathways and competency frameworks within the PMO
• Drive tooling standardization (e.g., ConnectWise, Jira, MS Project, Smartsheet, Confluence, Power BI) to ensure interoperability and reporting consistency
• Partner with Finance, HR, and Sales Operations to align PMO processes with revenue recognition, staffing, and pipeline workflows
• Champion governance forums (steering committees, portfolio reviews, risk councils) that elevate decision-making and stakeholder alignment
• Lead end-to-end delivery of large-scale cybersecurity programs spanning architecture, operations, compliance, and transformation initiatives
• Serve as the primary point of accountability to executive stakeholders at marquee public-sector and Fortune 500 clients
• Manage program scope, schedule, budget, risk, and quality across multi-year engagements with national security implications
• Coordinate cross-functional teams including security architects, red teamers, DevSecOps engineers, GRC specialists, and analysts
• Translate complex technical concepts into clear executive-level briefings, roadmaps, and decision documents
• Ensure programs align with frameworks such as NIST CSF, ISO 27001, ITSG-33, CMMC, and allied defense standards
• Drive continuous improvement in delivery methodology, KPIs, and client outcomes
• Support business development through scoping, proposals, and trusted-advisor relationships

Penetration Tester

Executive Advisor – Governance, Risk and Compliance

Cybersecurity Program Manager