Principal Security Engineer

Franklin Fitch; New York (NY); On-site; USD 140,000 - 180,000; Full time

Job summary

Franklin Fitch is seeking a Principal Security Engineer to lead the implementation and enhancement of cybersecurity controls across a complex, multi-site environment. You will work hands-on across Azure, network, endpoint, identity, and cloud security while maturing the organization’s technical security capabilities.

You’ll own technical security initiatives, implement controls, and deliver projects against a roadmap, collaborating with IT, MSP, vCISO, and Legal teams to strengthen security

Qualifications

• 7+ years of hands-on IT and cybersecurity experience, with experience leading a security program.
• Strong Azure security experience with solid enterprise networking fundamentals.
• Hands-on experience with Microsoft Sentinel, SentinelOne, AD/Entra ID, firewalls, VPNs, IDS/IPS, and endpoint security.
• Strong PowerShell and/or Python scripting experience.
• Experience implementing controls aligned with NIST CSF, ISO 27001, CIS, and SOX/ITGC.
• Proven ability to personally deliver technical security projects in fast-paced, regulated environments.

Responsibilities

• Drive the implementation and optimization of security controls across network, endpoint, identity, Azure, and cloud environments.
• Design and maintain firewalls, network segmentation, VPNs, IDS/IPS, EDR, and MFA controls.
• Manage and tune SIEM, EDR, and email security platforms, including detection rules, alerts, and dashboards.
• Lead incident response, vulnerability management, patch remediation, and technical security projects.

Skills

Azure security

Security program leadership

Networking fundamentals

Scripting: PowerShell/Python

Security frameworks (NIST CSF, ISO 270

Incident response

Tools

Microsoft Sentinel

SentinelOne

AD/Entra ID

Firewalls

VPNs

IDS/IPS

EDR

MFA controls

PowerShell

Python

Job description

Our client is a global aviation organization seeking a Principal Security Engineer to lead the implementation and enhancement of cybersecurity controls across a complex, multi-site environment. This is an opportunity to work hands‑on across Azure, network, endpoint, identity, and cloud security while helping mature the organization’s technical security capabilities.

The Role

You’ll take ownership of technical security initiatives across the environment, implementing controls and delivering projects against an established technical roadmap. Working closely with IT, the MSP, vCISO, and Legal teams, you’ll strengthen security across cloud, infrastructure, identity, and endpoint environments.

Key Responsibilities

• Drive the implementation and optimization of security controls across network, endpoint, identity, Azure, and cloud environments.
• Design and maintain firewalls, network segmentation, VPNs, IDS/IPS, EDR, and MFA controls.
• Manage and tune SIEM, EDR, and email security platforms, including detection rules, alerts, and dashboards.
• Lead incident response, vulnerability management, patch remediation, and technical security projects.

Required Skills & Experience

• 7+ years of hands‑on IT and cybersecurity experience, with experience leading a security program.
• Strong Azure security experience with solid enterprise networking fundamentals.
• Hands‑on experience with Microsoft Sentinel, SentinelOne, AD/Entra ID, firewalls, VPNs, IDS/IPS, and endpoint security.
• Strong PowerShell and/or Python scripting experience.
• Experience implementing controls aligned with NIST CSF, ISO 27001, CIS, and SOX/ITGC.
• Proven ability to personally deliver technical security projects in fast‑paced, regulated environments.