Principal Cybersecurity Engineer

ECLARO; Village of Farmingdale (NY); On-site; USD 180,000 - 230,000; Full time

Benefits offered by this job

401k Retirement Savings Plan

Commuter Check Pretax Benefits

Medical, Dental & Vision Insurance

Job summary

ECLARO is seeking a Principal Cybersecurity Engineer in Farmingdale, NY to design, implement, and improve security controls across infrastructure, cloud, and software lifecycles.

You will align security with DevSecOps practices, automate testing, and embed security in CI/CD pipelines while partnering with IT and engineering to balance innovation with risk mitigation.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, or related field.
• CISSP, CISM, CEH, or Microsoft Security certs (SC-200, AZ-500, SC-100).
• 10+ years in cybersecurity with hands-on Azure security and DevSecOps.
• Experience integrating security into Azure DevOps or GitHub CI/CD pipelines.
• Familiarity with container/orchestration security (Docker, Kubernetes on AKS).
• Strong scripting and automation (PowerShell, Python).
• Experience with Defender suite, Purview, Azure AD.
• Excellent communication and cross-functional collaboration.

Responsibilities

• Develop and enforce cybersecurity strategy aligned with NIST, CIS, and ISO frameworks.
• Secure on-premise infrastructure and network segmentation; manage patches and baselines.
• Lead threat hunting, incident response, and root cause analysis efforts.
• Deploy and manage endpoint security, vulnerability scanning, and log analysis.
• Ensure compliance with data protection regulations and audit readiness.
• Integrate security into DevSecOps through CI/CD pipelines and IaC.
• Lead security training and promote DevSecOps mindset across teams.

Skills

DevSecOps

Security strategy

Threat hunting

Incident response

Cloud security

PowerShell

Python

Azure security

Education

Bachelor's degree in Cybersecurity/CS

Tools

Azure DevOps

GitHub CI/CD

Microsoft Defender for Cloud

Azure Policy

Azure Security Center

Azure Key Vault

Kubernetes on AKS

Job description

Job Number: 26-04534
Use your skills where innovative technology solutions begin. ECLARO is looking for a

Farmingdale, NY.
ECLARO’s client is a leading technology solutions provider, collaborating with customers to manage their needs and achieve success in their business goals. If you’re up to the challenge, then take a chance at this rewarding opportunity!

Job Number: 26-04534
Use your skills where innovative technology solutions begin. ECLARO is looking for a Principal Cybersecurity Engineer for our client in Farmingdale, NY.
ECLARO’s client is a leading technology solutions provider, collaborating with customers to manage their needs and achieve success in their business goals. If you’re up to the challenge, then take a chance at this rewarding opportunity!

Position Overview

• As the Principal Cybersecurity Engineer, will take ownership of designing, implementing, and continuously improving security controls across infrastructure, cloud, and software development lifecycles.
• Will align the security operations with modern Dev SecOps practices—automating security testing, enforcing secure code practices, and integrating security into CI / CD pipelines.
• Will partner closely with IT, engineering, and business teams to build a culture of proactive security that balances innovation with risk mitigation. From securing cloud environments to enabling automated compliance checks, this is a hands-on and strategic role critical to our future.

Responsibilities

• Cybersecurity Strategy & Governance:
  • Develop and execute a cybersecurity strategy aligned with NIST, CIS, and ISO frameworks.
  • Define and enforce enterprise-wide security policies, standards, and architecture.
• Cloud & Infrastructure Security:
  • Maintain and secure on-premise infrastructure including servers, firewalls, switches, routers, backup systems, and storage appliances.
  • Implement and enforce network segmentation, access controls, and perimeter security policies on-prem.
  • Monitor and manage patching, configuration baselines, and physical server security for all on-premise systems.
  • Collaborate with IT operations to ensure high availability, backup integrity, and disaster recovery readiness of on-premise infrastructure.
  • Integrate on-prem security telemetry with cloud-native SIEM tools.
  • Ensure consistent security posture and policy enforcement across hybrid environments using Azure Arc and other hybrid tooling.
  • Secure Microsoft Azure environments using Azure-native tools such as Microsoft Defender for Cloud, Azure Policy, Azure Security Center, and Azure Key Vault.
  • Define Azure Entra IAM strategies, monitor configurations, and implement guardrails via policy-as-code (e.g., Bicep, Azure Blueprints).
• Risk Management & Incident Response:
  • Conduct enterprise risk assessments and develop mitigation plans.
  • Lead threat hunting, incident response, and root cause analysis efforts.
• Threat Detection & Vulnerability Management:
  • Deploy and manage Endpoint and other tools for vulnerability scanning and log analysis.
  • Conduct red / blue team exercises and coordinate remediation with IT operations and DevOps teams.
• Compliance & Audit Readiness:
  • Ensure compliance with data protection and industry regulations (e.g., CCPA, GDPR, HIPAA) using Microsoft Compliance Manager.
  • Maintain audit logs, control documentation, and readiness for third-party security assessments.
• Security Awareness & Culture:
  • Lead employee security training programs, simulate phishing attacks, and drive secure behavior adoption.
  • Foster a DevSecOps mindset across the engineering and product development lifecycle.
• DevSecOps Integration:
  • Embed security practices into DevOps workflows, CI / CD pipelines, and infrastructure as code using Azure DevOps.
  • Automate security checks using GitHub Advanced Security, and container scanning tools.
  • Define secure development standards and review code, build, and deployment processes.
  • Enable shift-left security by training developers and automating early-stage testing in Azure-based environments.

Preferred Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, or a related field.
• CISSP, CISM, CEH, or Microsoft Security certifications (e.g., SC-200, AZ-500, SC-100).
• 10+ years in cybersecurity with recent hands-on experience in Azure security and DevSecOps practices.
• Proven experience integrating security into Azure DevOps or GitHub CI / CD pipelines.
• Familiarity with container and orchestration security (e.g., Docker, Kubernetes on AKS).
• Strong scripting and automation capabilities (e.g., PowerShell, Python).
• Experience with Microsoft security and compliance platforms (e.g., Defender suite, Purview, Azure AD).
• Strong communication and collaboration skills with both technical and executive audiences.
• Ability to work cross-functionally and influence secure design decisions throughout the software lifecycle.

If hired, you will enjoy the following ECLARO Benefits:

• 401k Retirement Savings Plan administered by Merrill Lynch
• Commuter Check Pretax Commuter Benefits
• Eligibility to purchase Medical, Dental & Vision Insurance through ECLARO

Equal Opportunity Employer: ECLARO values diversity and does not discriminate based on Race, Color, Religion, Sex, Sexual Orientation, National Origin, Age, Genetic Information, Disability, Protected Veteran Status, or any other legally protected group status, in compliance with all applicable laws.