Cybersecurity Consultant

Cybersecurity Consultant

Location: Portsmouth, NH — On-site
Employment Type: Contract
Schedule: 40 hours/week, Monday–Friday

Help Secure the Next Generation of Defense Technology

Galvion is seeking a Cybersecurity Consultant to join our Advanced Development Engineering team in Portsmouth, NH.

This role is ideal for a security professional who enjoys working directly with hardware and software engineers to build security into innovative embedded systems from the ground up.

You’ll provide hands-on cybersecurity guidance across custom hardware, embedded computing, firmware, operating systems, and application software, helping engineering teams meet demanding DoD and Army security requirements without compromising performance or usability.

What You’ll Do

• Partner with hardware and software engineers to implement security-by-design principles, including Secure Boot, code signing, key management, access controls, and hardware security.
• Interpret and map applicable DISA STIGs and SRGs to firmware, embedded operating systems, and application software.
• Establish and support Software Bill of Materials (SBOM) processes across development and build environments.
• Help engineering teams track third-party dependencies, open-source software, and software supply-chain vulnerabilities.
• Review architectures, technical documentation, and software builds for alignment with NIST SP 800-53 Rev. 5 controls.
• Analyze static code analysis, vulnerability scanning, and SBOM findings and work with engineers to develop practical remediation strategies.
• Collaborate with external cybersecurity and compliance stakeholders to support successful system accreditation.
• Balance security requirements with the real-world constraints of power, weight, processing capacity, and latency in embedded and soldier-portable systems.

What You Bring

• Bachelor’s degree in Cybersecurity, Computer Science, Computer Engineering, or a related technical discipline.
• 5+ years of experience in system security engineering, cybersecurity consulting, or a related advisory role.
• Strong knowledge of NIST SP 800-53 Rev. 5 and DISA STIG/SRG implementation.
• Understanding of federal software supply-chain security requirements and practices.
• Familiarity with SBOM standards, including SPDX and CycloneDX, and software dependency-management tools.
• Experience or familiarity with embedded environments such as Android, embedded Linux, or RTOS.
• Understanding of C/C++ or low-level software development and hardware security principles.
• Strong communication skills and the ability to translate cybersecurity requirements into actionable engineering guidance.

We’d Especially Like to Meet You If You Have

• Experience automating SBOM generation and vulnerability scanning within CI/CD pipelines.
• Experience securing embedded or hardware-focused products.
• Exposure to DoD Risk Management Framework (RMF) processes.
• Experience with tactical, soldier-portable, IoT, or other resource-constrained platforms.
• Practical experience with TPMs, hardware roots of trust, Secure Boot, and code signing.
• A track record of finding pragmatic ways to satisfy security requirements while preserving system performance.

The Kind of Person Who Will Thrive Here

We’re looking for a collaborative advisor, not simply someone who identifies security problems.

You should be comfortable sitting alongside engineers, understanding their technical challenges, and turning complex security standards into practical solutions. You’ll bring a pragmatic, engineering-focused mindset to cybersecurity and help teams build secure systems without creating unnecessary development friction.

Work Environment

This is an on-site position in Portsmouth, New Hampshire, with occasional travel between Galvion facilities and to customer locations.

Security clearance is not required for this position.

Galvion is an equal opportunity employer and complies with all applicable federal, state, and local employment laws.