Senior Cybersecurity Engineer

AV; Pennsylvania; On-site; USD 111,500 - 170,000; Full time

Benefits offered by this job

Medical, dental, and vision benefits

401(k) with company matching

9/80 work schedule

Paid holiday shutdown

Job summary

AV is seeking a Senior Cyber Security Engineer to lead security architecture initiatives within the Digital Business Technology team. This role requires extensive experience in designing and implementing security solutions across both cloud and on-premises environments.

The ideal candidate will have strong technical skills and leadership experience in enterprise security, aiming to enhance the organization’s security posture and compliance with frameworks like NIST and CMMC.

Qualifications

• 8–12 years experience in enterprise security engineering, with 3 years in a senior role.
• Advanced knowledge of security frameworks such as NIST and CMMC.
• Proven ability to lead large-scale security initiatives.

Responsibilities

• Design and implement enterprise cybersecurity solutions.
• Engineer controls for CMMC Level 2/3 compliance.
• Develop and maintain incident response playbooks.

Skills

Cybersecurity expertise

Technical writing

Scripting with PowerShell

KQL development

Windows, Linux, MacOS knowledge

Incident response leadership

Security frameworks knowledge

Education

Bachelor's degree in computer science, cyber security, or related field

Tools

Microsoft Defender

Microsoft Sentinel

Microsoft Intune

PowerShell

KQL

Job description

Senior Cyber Security Engineer

The Senior Cyber Security Engineer is a key technical leader within the global Digital Business Technology team, responsible for driving security architecture decisions and providing strategic direction for the organization’s security posture. This role requires deep expertise across multiple security domains, demonstrated leadership ability, and proven experience in designing and implementing enterprise-scale security solutions across cloud and on-premises environments.

Position Responsibilities

• Design, implement, and maintain enterprise cybersecurity solutions across Microsoft technologies.
• Engineer security controls required for CMMC Level 2/3 and NIST SP 800-171 compliance.
• Develop and maintain Microsoft Sentinel analytics, workbooks, automation rules, and incident response playbooks.
• Deploy and manage Microsoft Defender XDR technologies including Defender for Endpoint, Defender for Identity, Defender for Office 365, Defender for Cloud Apps, and Microsoft Defender for Cloud.
• Design and administer Microsoft Intune and endpoint security policies.
• Implement Conditional Access, Identity Protection, and Zero Trust security architectures using Microsoft Entra ID.
• Build security automation using Logic Apps, Power Automate, KQL, PowerShell, and Microsoft Graph.
• Develop advanced KQL queries for threat hunting, compliance reporting, and security monitoring.
• Partner with infrastructure teams to harden Windows Server, Windows 11, Azure, and Microsoft 365 environments.
• Support vulnerability management and remediation coordination using tools such as Microsoft Defender Vulnerability Management, Tanium, or similar platforms.
• Participate in security architecture reviews and provide engineering guidance on new technologies.
• Support incident response activities during security investigations.
• Produce technical documentation, standards, and implementation guides.

Basic Qualifications

• Bachelor’s degree in computer science, cyber security, or related STEM field; or equivalent combination of education and experience.
• Minimum 8–12 years’ experience in enterprise security engineering, with at least 3 years in a senior technical role.
• Advanced knowledge of security frameworks and compliance standards (NIST, CMMC, DFARS, ITAR).
• Proven track record of leading large-scale security initiatives and architectural decisions.
• Expert knowledge of Windows, Linux, and MacOS operating systems and enterprise networking concepts.
• Experience leading incident response for critical security events.
• Strong technical writing skills for documentation and policy development.
• Strong scripting experience using PowerShell.
• Advanced Kusto Query Language (KQL) experience.
• Experience implementing security baselines and hardening standards.
• Excellent troubleshooting and analytical skills.
• Strong written and verbal communication abilities.

Demonstrated Experience

• Experience supporting Defense Industrial Base (DIB) organizations.
• Experience in Microsoft GCC High environments.
• Experience with CMMC assessments or audit preparation.
• Experience with Microsoft Purview.
• Experience integrating third‑party security platforms into Microsoft Sentinel.
• KQL development and threat hunting.
• Intune enterprise deployments.
• Windows security engineering.
• PowerShell automation.
• Security architecture and Zero Trust implementation.

Other Qualifications & Desired Competencies

• Master’s degree in related field preferred.
• Security certifications such as Microsoft Certified: CAE, CISSP, CISM, or similar industry standard credentials highly desired.
• Self‑starter capable of leading enterprise security initiatives.
• Strong engineering mindset with an automation‑first approach.
• Ability to balance operational needs with regulatory compliance.
• Comfortable working in fast‑paced, highly regulated environments.
• Excellent collaborator who can partner across Security, IT, Engineering, and Compliance teams.
• Passion for continuous improvement and emerging cybersecurity technologies.

Physical Demands

• Ability to work in an office environment.
• Required to sit and stand for long periods; talk, hear, and use hands and fingers to operate a computer and telephone keyboard (Frequent).

Special Requirements

• U.S. Citizen, U.S. Permanent Resident (Green Card holder), or asylee/refugee status as defined by 8 U.S.C. 1324b(a)(3) required.
• May be required to travel within the Continental U.S. occasionally.

Clearance Level

No Clearance

Salary Range

$111,500 – $170,000

ITAR Requirement

This position requires access to information that is subject to compliance with the International Traffic Arms Regulations (“ITAR”) and/or the Export Administration Regulations (“EAR”). Applicants must qualify as a U.S. person under ITAR and/or EAR, or be approved for an export license. U.S. citizenship or permanent residency is required.

Benefits

AV offers an excellent benefits package including medical, dental, vision, 401(k) with company matching, a 9/80 work schedule, and a paid holiday shutdown.

Equal Opportunity Statement

We are proud to be an EEO/AA Equal Opportunity Employer, including disability/veterans. Qualified applicants will receive fair and impartial consideration without regard to race, sex, color, religion, national origin, age, disability, protected veteran status, genetic data, sexual orientation, gender identity, or other legally protected status.