Senior Cybersecurity Engineer

Position Responsibilities

• Design, implement, and maintain enterprise cybersecurity solutions across Microsoft technologies.
• Engineer security controls required for CMMC Level 2/3 and NIST SP 800-171 compliance.
• Develop and maintain Microsoft Sentinel analytics, workbooks, automation rules, and incident response playbooks.
• Deploy and manage Microsoft Defender XDR technologies including Defender for Endpoint, Defender for Identity, Defender for Office 365, Defender for Cloud Apps, Microsoft Defender for Cloud Design and administer Microsoft Intune and endpoint security policies.
• Implement Conditional Access, Identity Protection, and Zero Trust security architectures using Microsoft Entra ID.
• Build security automation using Logic Apps, Power Automate, KQL, PowerShell, and Microsoft Graph.
• Develop advanced KQL queries for threat hunting, compliance reporting, and security monitoring.
• Partner with Infrastructure teams to harden Windows Server, Windows 11, Azure, and Microsoft 365 environments.
• Support vulnerability management and remediation coordination using tools such as Microsoft Defender Vulnerability Management, Tanium, or similar platforms.
• Participate in security architecture reviews and provide engineering guidance on new technologies.
• Support incident response activities during security investigations.
• Produce technical documentation, standards, and implementation guides.

Basic Qualifications (Required Skills & Experience)

• Bachelor’s degree in computer science, cyber security, or related STEM field; or equivalent combination of education and experience
• Minimum 8 – 12 years' experience in enterprise security engineering, with at least 3 years in a senior technical role
• Advanced knowledge of security frameworks and compliance standards (NIST, CMMC, DFARS, ITAR)
• Proven track record of leading large-scale security initiatives and architectural decisions
• Expert knowledge of Windows, Linux, and MacOS operating systems and enterprise networking concepts
• Experience leading incident response for critical security events
• Strong technical writing skills for documentation and policy development
• Strong scripting experience using PowerShell
• Advanced Kusto Query Language (KQL) experience
• Experience implementing security baselines and hardening standards
• Excellent troubleshooting and analytical skills
• Strong written and verbal communication abilities
• Demonstrated Experience Supporting Defense Industrial Base (DIB) organizations
• Experience in Microsoft GCC High environments
• Experience with CMMC assessments or audit preparation
• Experience with Microsoft Purview
• Experience integrating third-party security platforms into Microsoft Sentinel
• KQL development and threat hunting
• Intune enterprise deployments
• Windows security engineering
• Powershell automation
• Security architecture and Zero Trust implementation

Other Qualifications & Desired Competencies

• Master's degree in related field preferred
• Security certifications such as Microsoft Certified: CAE, CISSP, CISM or similar industry standard credentials are highly desired
• Self-starter capable of leading enterprise security initiatives
• Strong engineering mindset with an automation-first approach
• Able to balance operational needs with regulatory compliance
• Comfortable working in fast-paced, highly regulated environments
• Excellent collaborator who can partner across Security, IT, Engineering, and Compliance teams
• Passion for continuous improvement and emerging cybersecurity technologies