Cybersecurity Validation & Exposure Engineer

Teledyne Technologies Incorporated; Huntsville (AL); On-site; USD 120,000 - 180,000; Full time

Job summary

Teledyne Technologies Incorporated is seeking a Senior Cybersecurity Architect in Huntsville, AL to oversee enterprise security controls and risk themes. The role bridges vulnerability management, threat hunting, and security engineering to ensure robust perimeter defenses and architecture-level remediation.

The position reports to senior security leadership and requires collaboration with IT and business units to validate rule sets, prioritize fixes, and drive proactive security improvements

Qualifications

• Must be a U.S. Citizen.
• Bachelor's degree in Information Security, Computer Science, or related field, or equivalent experience.
• Progressive cybersecurity experience spanning network security, security engineering, or purple/red-team functions.
• Hands-on experience reviewing and administering firewall rule sets and network segmentation.
• Working knowledge of adversary TTPs and purple-team/adversary-emulation methodology (MITRE ATT&CK).
• Experience with vulnerability management and external attack-surface monitoring tooling.
• Broad technical knowledge of current IT security technologies and architecture.

Responsibilities

• Conducts assessments of enterprise architecture to validate detection and control effectiveness against current adversary TTPs.
• Maintains awareness of network topology, cloud environments, and business-system interdependencies across the enterprise.
• Monitors external-facing IP space for exposure and aligns findings with approved baselines and firewall rules.
• Reviews firewall rules on a regular cadence to identify overly permissive or misaligned rules and evaluates exceptions.
• Partners with vulnerability and patch management to prioritize remediation of hygiene gaps and translate findings into risk themes.
• Collaborates with networking teams to identify under-monitored segments and drive remediation ownership.
• Maintains a prioritized backlog of architecture and control weaknesses and briefs leadership on trends.
• Revalidates business justification for firewall access paths and rights-size access where needed.
• Documents methodology and remediation recommendations to inform detection engineering priorities.
• Supports incident response and threat intelligence with architecture context during investigations.

Skills

Cybersecurity experience

Firewall rule review

MITRE ATT&CK

Vulnerability management

CTEM / exposure management

Python/PowerShell scripting

NIST SP 800-171 / CMMC

Defense contractor experience

Networking fundamentals

Security technologies knowledge

Education

Bachelor's degree in Information Security or CS

Tools

CTEM platforms

Job description

Be visionary

Teledyne Technologies Incorporated provides enabling technologies for industrial growth markets that require advanced technology and high reliability. These markets include aerospace and defense, factory automation, air and water quality environmental monitoring, electronics design and development, oceanographic research, deepwater oil and gas exploration and production, medical imaging and pharmaceutical research.

Be visionary

Teledyne Technologies Incorporated provides enabling technologies for industrial growth markets that require advanced technology and high reliability. These markets include aerospace and defense, factory automation, air and water quality environmental monitoring, electronics design and development, oceanographic research, deepwater oil and gas exploration and production, medical imaging and pharmaceutical research.

We are looking for individuals who thrive on making an impact and want the excitement of being on a team that wins.

Job Description

Job Summary

The person in this position works across the enterprise information system to continuously validate the effectiveness of deployed controls against realistic adversary tradecraft. This role bridges the vulnerability/patch management, cyber threat hunting, and cybersecurity engineering functions — synthesizing their tactical findings into architecture-level risk themes, monitoring the external perimeter for unexpected exposure, and conducting recurring review of firewall rule sets to identify access that has drifted from its original business justification. The role reports to the Sr. Director of Enterprise Security Architecture and partners closely with IT and business function owners to prioritize and drive remediation of identified weaknesses.

Primary Duties & Responsibilities

• Conducts collaborative environment assessments of enterprise architecture to validate detection and control effectiveness against current adversary TTPs.
• Maintains current situational awareness of enterprise network topology, cloud environments, and business-system interdependencies across the full architecture.
• Monitors external-facing IP address space for unexpected or unauthorized exposure and correlates findings against approved architecture baselines and firewall rule sets.
• Reviews firewall rule sets on a recurring cadence to identify overly permissive, stale, or business-need-misaligned rules, and evaluates unintended capability introduced by point-in-time exception requests.
• Partners with vulnerability and patch management teams to prioritize remediation of systemic hygiene gaps, translating asset-level findings into architecture-level risk themes.
• Partners with the networking team to identify under-monitored network segments, orphaned assets, and other "dark corners," and drives remediation ownership to the appropriate team.
• Develops and maintains a prioritized, risk-ranked backlog of architecture and control weaknesses; briefs leadership and cross-functional stakeholders on trend and remediation status.
• Coordinates with IT and business function owners to revalidate the business justification behind existing firewall rules and access paths, and right-sizes access when justification no longer applies.
• Documents findings, methodology, and remediation recommendations to inform detection-engineering priorities and continuous improvement of the security architecture.
• Supports incident response and threat intelligence functions with architecture context during active investigations.

Job Qualifications

• Must be a U.S. Citizen.
• Bachelor's degree in Information Security, Computer Science, or related field, or equivalent experience.
• Progressive cybersecurity experience spanning network security, security engineering, or purple/red-team functions
• Hands-on experience reviewing and administering firewall rule sets and network segmentation.
• Working knowledge of adversary TTPs and purple-team/adversary-emulation methodology (MITRE ATT&CK).
• Experience with vulnerability management and external attack-surface monitoring tooling.
• Broad technical knowledge, extensive knowledge of current and upcoming IT security technologies and techniques that cover all levels of IT architecture, including those that affect business processes, data, applications, & networked systems infrastructure, as well as their effects on a diverse computing environment and a passion to stay abreast of emerging technologies.

Other Qualifications

• Industry Certifications: CISSP, CISA, OSCP, GPEN, GCPN, CEH
• Experience with Continuous Threat Exposure Management (CTEM) or attack-surface-management platforms.
• Scripting/automation experience (Python or PowerShell) for exposure and rule-hygiene analytics.
• Familiarity with CMMC/NIST SP 800-171 control environments.
• Prior experience in a defense contractor or regulated critical-infrastructure environment.
• Knowledge of network infrastructure, including routers, switches, firewalls, and associated network protocols and concepts.
• Experience with modern networking and security technologies.

Teledyne and all of our employees are committed to conducting business with the highest ethical standards.

We require all employees to comply with all applicable laws, regulations, rules and regulatory orders.

Our reputation for honesty, integrity and high ethics is as important to us as our reputation for making innovative sensing solutions.

Teledyne is an Equal Opportunity Employer.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status, age, or any other characteristic or non-merit based factor made unlawful by federal, state, or local laws.