Senior Cybersecurity Engineer

Benefits

• Health, Dental, Vision, Life and Disability benefits
• 401k with Company Match
• Paid vacation (2 weeks)
• Sick/personal leave (48 hours)
• Holidays (11 paid)

Overview

The organization is seeking a Senior Cybersecurity Engineer to join the Information Technology team. This role designs, implements, and manages advanced security technologies and practices to protect data and assets, providing technical leadership and guidance across IT and business functions. The position reports to the Director of IT and collaborates with the Systems Engineer, Network Engineer, ISSO, ISSM, and Help Desk Supervisor to deliver secure, integrated solutions.

Responsibilities

• Security Awareness & Collaboration
• Advise Director of IT and company leadership on cybersecurity requirements, concerns, processes and best practices
• Mentor junior security staff and provide technical leadership
• Advise and train technical staff and users in cybersecurity best practices
• Security Architecture & Engineering
• Design, implement, and manage security solutions (e.g., SIEM, EDR, firewalls, IDS/IPS, IAM, VPN)
• Architect secure network, application, and cloud environments
• Evaluate and integrate new security technologies
• Threat Detection & Response
• Work with external security service providers to coordinate monitoring detection, threat hunting, and incident response activities
• Analyze logs and alerts to identify anomalies or potential threats
• Manage incident response lifecycle
• Vulnerability Management
• Supervise the vulnerability management program
• Coordinate and validate regular vulnerability scans and penetration tests
• Prioritize vulnerability remediation efforts across endpoints, networks, and applications
• Work with IT team to validate and apply patches
• Governance, Risk & Compliance
• Develop and maintain security policies, procedures, and standards
• Ensure compliance with relevant standards, directives and regulations
• Conduct risk assessments and support audit activities
• Remain abreast of emerging technologies, cyber threats and security tools
• Advise ISSO and ISSM on issues related to securing and monitoring classified DoD networks
• Project Management
• Lead multiple cybersecurity initiatives
• Coordinate with IT personnel and stakeholders to gather requirements, refine objectives, engineer solutions, and develop required timelines, milestones and cost projections
• Set goals and expectations for projects and team members
• Take ownership of initiatives and see them through completion

Requirements

• Must be a U.S. citizen and have an active Secret Security Clearance
• Bachelor’s (BS) degree in Cybersecurity, Computer Science, Information Technology, or related field (or equivalent experience)
• Eight (8) – ten (10)+ years of hands-on experience in cybersecurity roles, with at least 2 years in a senior or lead capacity
• Strong understanding of network protocols, security architecture, and security practices
• Experience in a Windows-based enterprise IT environment (preferably GCC High, Azure AD, Intune, and AVD)
• Proficient in scripting and automation (e.g., Python, PowerShell, Bash)
• Experience with cloud platforms (AWS and Azure) and their security services
• In-depth knowledge of modern threat landscapes, vulnerabilities, mitigation techniques, and security tools and processes
• Ability to lead teams and manage projects to achieve security goals and objectives
• Ability to write clear and concise cybersecurity guidance, procedures and documentation

Technologies

• Python, PowerShell, Bash
• AWS, Azure, Azure AD, Intune, AVD
• GCC High, Windows
• Fortinet, Hyper-V
• SIEM, EDR, IDS/IPS, IAM, VPN

Preferred Skills and Experience

• DoD security practices and regulations
• Migration from on-prem architecture to cloud
• Virtualization (preferably Hyper-V)
• Familiarity with open-source security tools
• Experience with Fortinet security products
• AWS/Azure Security Certifications
• CISSP (Certified Information Systems Security Professional)
• OSCP (Offensive Security Certified Professional)
• GIAC certifications (e.g., GCIH, GCIA, GCED, GPEN)
• CEH (Certified Ethical Hacker)
• Security