Manager, Cyber Capabilities

Shift5 is redefining the future of onboard operational technology (OT). As a fast-growing scale-up, we specialize in cutting-edge cybersecurity, predictive maintenance, and compliance for OT systems across defense, aerospace, and rail. We are a team of passionate, innovative professionals who thrive in a collaborative environment, driven by a shared mission to revolutionize how fleets operate. By unlocking and democratizing the vast potential of onboard OT data, we help our customers’ fleets run smarter, safer, and more efficiently. Ready to be part of the next frontier in transportation and critical infrastructure? Come join us.

Our Values:

• Embrace Truth and Integrity: Base decisions on data, foster open dialogue, and uphold unwavering integrity.
• User-Centric Focus: Prioritize user needs to guide our actions and resource allocation.
• Collaborative & Adaptable: Collaborate for excellence, learning from failures and driving iterative improvements, recognizing every decision's significance.

Shift5 is seeking an experienced Manager, Cyber Capabilities to lead and grow our dedicated vulnerability research team. This pivotal role combines strategic team leadership, mentorship, and execution management with significant hands-on technical contribution. The Manager will drive the research and development of novel cyber capabilities derived from deep vulnerability analysis of embedded systems, operational technology (OT) protocols, and RF communications inherent in critical transportation and defense platforms. This position requires a leader who excels at both guiding a team and actively participating in cutting-edge research, directly supporting Shift5's mission to bring order to the complexity of onboard data and enhance the security, safety, and resilience of aircraft, rail, and military assets.

Location: Rosslyn, VA - Hybrid (required in-office 3-4 days a week), occasional travel to customer sites <15%.

Responsibilities:

Team Leadership & Mentorship:

• Lead, manage, mentor, and develop a high-performing team of vulnerability researchers, fostering a culture of technical excellence, innovation, and collaboration.
• Define clear research objectives, manage project execution across multiple initiatives, allocate resources effectively, and ensure the timely delivery of impactful research outcomes and capabilities.
• Champion the technical growth and development of team members, identifying skill gaps, providing coaching, and facilitating opportunities to educate others across the organization and company. 

Hands-on Research & Capability Development:

• Serve as a technical leader and individual contributor, actively engaging in complex vulnerability research, reverse engineering (e.g. Ghidra, IDA Pro, Binary Ninja), and proof-of-concept development targeting embedded systems (firmware, RTOS, hardware), OT protocols, and RF communications systems.
• Spearhead the development of novel cyber capabilities - defined as advanced techniques, methodologies, and deep system understanding derived from offensive security research

Tooling & Innovation:

• Direct and contribute to the architecture, design, and development of specialized software tools and frameworks to accelerate vulnerability discovery, reverse engineering, and capability development efforts. This includes prototyping innovative tooling and frameworks designed to enhance research efficiency and effectiveness. 
• Cultivate an environment of innovation by encouraging the exploration of new attack surfaces, unconventional research methodologies, and the creative application of research findings. 

Collaboration & Communication:

• Collaborate closely and effectively with cross-functional teams, including Detection Engineering, RF/DSP Engineering, Intelligence Analysts, Product Management, Software/Hardware/Firmware Engineering, and Field Engineering teams, to ensure research findings are operationalized and integrated into Shift5's products and services. 
• Translate highly complex technical research findings, vulnerability details, and capability implications into clear, concise, and actionable insights consumable by diverse audiences, ranging from deeply technical peers to product managers and executive leadership.
• May occasionally interface with customers or external partners to understand specific platform challenges, gather requirements, or communicate the impact and value of the team's research efforts.

Technical Rigor & Reporting:

• Uphold the highest standards of techn