Job Description

Position Overview

• Location Type: Hybrid
• Employment Type: Full-time
• Salary: Not provided

Archer is an aerospace company based in San Jose, California, building an all-electric vertical takeoff and landing aircraft with a mission to advance the benefits of sustainable air mobility. We are designing, manufacturing, and operating an all-electric aircraft that can carry four passengers while producing minimal noise. Our sights are set high and our problems are hard, and we believe that diversity in the workplace is what makes us smarter, drives better insights, and will ultimately lift us all to success. We are dedicated to cultivating an equitable and inclusive environment that embraces our differences, and supports and celebrates all of our team members.

Responsibilities

• Oversee Security Operations: Monitoring, vulnerability assessments, and incident response.
• Design and Implement Cybersecurity Solutions: Safeguarding critical infrastructure.
• Lead Authentication Modernization: Access infrastructure and security policy enhancement.
• Develop and Enforce Security Policies: Compliance with NIST, FAA, CMMC, and ISO 27001 standards.
• Implement AI-Driven CTEM & Zero-Trust Architecture: Continuous Threat Exposure Management.
• Co-chair Cross-Functional Working Groups: With Engineering (Avionics Security) and Legal (GDPR/CCPA compliance).
• Collaborate with Regulators & Partners: Enhance cybersecurity resilience.
• Establish Cybersecurity Training Programs: Workforce development.

Key Outcomes

• Achieve NIST CSF Adaptive/Resilient Certification.
• Implement 24/7 AI-Driven Threat Detection & Response (SOAR/SIEM).
• Ensure CMMC Level 3 Compliance (by Q4 2025) & Eliminate TLS 1.3 Non-Compliance.
• Deploy Supplier Risk Orchestration: Achieving ISO 27001 compliance across 650+ vendors.
• Scale a World-Class Security Team: Embed security-by-design in R&D and engineering.

Additional Focus Areas

• Establish Cyber-Physical Security Measures: Protect avionics systems, OT environments, and supply chain infrastructure.
• Implement Cyber Resilience Testing: Simulate attacks and enhance incident response preparedness.
• Develop Cloud Security Frameworks: Support hybrid and multi-cloud environments.
• Drive Risk-Based Vulnerability Management Programs: Ensure timely remediation of critical threats.
• Create Board-Level Cybersecurity Reporting: Key Risk Indicators (KRIs) and security performance metrics.
• Lead Third-Party Security Assessments: Strengthen supplier and vendor cybersecurity compliance.

Requirements

• Education: Bachelor’s degree (Specific degree requirements not provided)

Application Instructions

• Application instructions not provided in the job description.