• The Contractor shall identify a Lead Cybersecurity Manager who will serve as the Contractor’s main POC for providing additional and direct support to PM CT2 for all Cybersecurity functions (as defined in Section C.5.5). • The Lead Cybersecurity Manager shall coordinate with ATEC SO Information System Security Managers (ISSMs) and ensure compliance with security controls, and all pertinent DoD IT policy and procedures for all system integrations. • The Lead Cybersecurity Manager shall ensure data, information, and security systems are secure and function as required to prevent Cybersecurity breaches of all information systems. • The Lead Cybersecurity Manager shall provide a leadership role for all internal and external organizations to provide clear communication and direction for maximum Cybersecurity efforts. • The Lead Cybersecurity Manager shall lead the initiative for security best practices and provide recommendations to the Government.

• Shape company-wide security strategy and lead software engineering projects on a highly-autonomous and horizontally-integrated team with a lot of leverage. This is a code-forward role! • Develop and apply best-in-class secure baselines for cloud infrastructure. • Secure first- and third-party software supply chains, from the dev environment through CI/CD and into production. • Build and own identity and access management (IAM) systems that are user-friendly and promote least privilege. • Manage infrastructure vulnerabilities while supporting rapid growth for Engineering. • Consult on risk assessments, architectural designs, threat models, code reviews, and more—pragmatically balancing security with other business considerations.

• Monitor security alerts and logs from SIEM, EDR, and cloud security tools • Investigate and respond to security incidents (triage, containment, remediation) • Perform vulnerability assessments and support remediation efforts • Assist in security hardening of systems, networks, and cloud environments • Review access controls, permissions, and identity configurations • Participate in security audits, risk assessments, and compliance activities • Develop and maintain security documentation, procedures, and playbooks • Collaborate with DevOps and engineering teams to embed security best practices • Stay up to date with emerging threats, vulnerabilities, and attack techniques

• Develop and implement a strategic vision for information security, aligned with business objectives and focused on the continuous improvement of the area's processes and controls. • Manage contracts, assets, and services related to information security, ensuring their optimal efficiency. • Define information security standards and policies to protect information assets and support business continuity. • Ensure regulatory compliance applicable to the company and adherence to industry best practices. • Collaborate with technology teams to define and implement effective security integration strategies across the development lifecycle, from design through production. • Analyze and respond to information security incidents, map threats and vulnerabilities, and develop projects to prevent or remediate them. • Lead risk management, threat modeling, and impact assessments for new products, features, and partnerships. • Lead training and enablement programs to build a strong security culture across the company. • Provide support for internal and external audits. • Evaluate and monitor security KPIs, keeping leadership informed about the maturity of the information security program. • Respond to requests and support the provision of the company's ISMS (SGSI) information to clients and other stakeholders as needed.