Principal Security Engineer

Franklin Fitch; New York (NY); On-site; USD 140,000 - 210,000; Full time

Job summary

Franklin Fitch is assisting a global aviation organization in New York to hire a Principal Security Engineer to lead cybersecurity controls across Azure, network, endpoint, identity, and cloud security. You will own technical security initiatives across environment, collaborate with IT, MSP, vCISO, and Legal, and drive projects on a defined roadmap.

Candidates should have 7+ years in IT security, hands-on Azure, SIEM experience, and a proven track record delivering security programs in regulated

Qualifications

• 7+ years of hands-on IT and cybersecurity experience, with security program leadership.
• Strong Azure security experience with enterprise networking fundamentals.
• Hands-on experience with Microsoft Sentinel, SentinelOne, Entra ID, firewalls, VPNs, IDS/IPS, and endpoint security.
• PowerShell and/or Python scripting experience.
• Experience implementing controls aligned with NIST CSF, ISO 27001, CIS, and SOX/ITGC.
• Proven ability to deliver technical security projects in fast-paced, regulated environments.

Responsibilities

• Drive the implementation and optimization of security controls across network, endpoint, identity, Azure, and cloud environments.
• Design and maintain firewalls, network segmentation, VPNs, IDS/IPS, EDR, and MFA controls.
• Manage and tune SIEM, EDR, and email security platforms, including detection rules, alerts, and dashboards.
• Lead incident response, vulnerability management, patch remediation, and technical security projects.

Job description

Our client is a global aviation organization seeking a Principal Security Engineer to lead the implementation and enhancement of cybersecurity controls across a complex, multi-site environment. This is an opportunity to work hands-on across Azure, network, endpoint, identity, and cloud security while helping mature the organization's technical security capabilities.

The Role

You'll take ownership of technical security initiatives across the environment, implementing controls and delivering projects against an established technical roadmap. Working closely with IT, the MSP, vCISO, and Legal teams, you'll strengthen security across cloud, infrastructure, identity, and endpoint environments.

Key Responsibilities

• Drive the implementation and optimization of security controls across network, endpoint, identity, Azure, and cloud environments.
• Design and maintain firewalls, network segmentation, VPNs, IDS/IPS, EDR, and MFA controls.
• Manage and tune SIEM, EDR, and email security platforms, including detection rules, alerts, and dashboards.
• Lead incident response, vulnerability management, patch remediation, and technical security projects.

Required Skills & Experience

• 7+ years of hands-on IT and cybersecurity experience, with experience leading a security program.
• Strong Azure security experience with solid enterprise networking fundamentals.
• Hands-on experience with Microsoft Sentinel, SentinelOne, AD/Entra ID, firewalls, VPNs, IDS/IPS, and endpoint security.
• Strong PowerShell and/or Python scripting experience.
• Experience implementing controls aligned with NIST CSF, ISO 27001, CIS, and SOX/ITGC.
• Proven ability to personally deliver technical security projects in fast-paced, regulated environments.