Senior Cybersecurity Engineer

InvestedintheMission; Pennsylvania; On-site; USD 112,000 - 170,000; Full time

Job summary

AeroVironment seeks a Senior Cyber Security Engineer to lead security architecture across cloud and on‑prem environments. You will drive enterprise security decisions, build secure Microsoft ecosystems, and mentor teams.

The role demands deep expertise in Windows/Linux/MacOS security, incident response, and automation. It includes ITAR considerations, and a focus on scalable, compliant security architectures.

Qualifications

• Bachelor’s degree in computer science, cyber security, or related STEM field; or equivalent education/experience
• Minimum 8–12 years' enterprise security engineering experience, 3+ years in a senior role
• Advanced knowledge of security frameworks (NIST, CMMC, DFARS, ITAR)
• Proven leadership of large-scale security initiatives and architecture decisions
• Expert knowledge of Windows, Linux, and MacOS, and enterprise networking
• Experience leading incident response for critical security events
• Strong scripting with PowerShell; advanced KQL experience
• Experience implementing security baselines and hardening standards
• Excellent troubleshooting and analytical skills
• Strong written and verbal communication abilities

Responsibilities

• Design, implement, and maintain enterprise cybersecurity solutions across Microsoft technologies
• Engineer security controls for CMMC Level 2/3 and NIST SP 800-171 compliance
• Develop and maintain Microsoft Sentinel analytics, workbooks, automation rules, and incident response playbooks
• Deploy and manage Defender XDR technologies including Defender for Endpoint/Identity/O365/Cloud Apps
• Design and administer Microsoft Intune and endpoint security policies
• Implement Conditional Access, Identity Protection, and Zero Trust with Microsoft Entra ID
• Build security automation with Logic Apps, Power Automate, KQL, PowerShell, Graph
• Develop advanced KQL queries for threat hunting and compliance reporting
• Partner with Infrastructure to harden Windows Server, Windows 11, Azure, and M365
• Support vulnerability management using Defender Vulnerability Mgmt, Tanium, or similar
• Participate in security architecture reviews and provide engineering guidance
• Support incident response during security investigations
• Produce technical documentation and implementation guides

Skills

PowerShell

KQL

Zero Trust

Sentinel

Incident response

Windows

Linux

MacOS

Defender XDR

CMMC/NIST

Education

Bachelor's degree in CS/Cyber security

Master's degree preferred

Tools

Microsoft Sentinel

Defender XDR

Intune

Power Automate

Microsoft Defender for Endpoint

Azure

Tanium

Job description

Worker Type

Regular

Job Description

The Senior Cyber Security Engineer is a key technical leader within the global Digital Business Technology team, responsible for driving security architecture decisions and providing strategic direction for the organization’s security posture. This role requires deep expertise across multiple security domains, demonstrated leadership ability, and proven experience in designing and implementing enterprise-scale security solutions across cloud and on-premises environments.

Position Responsibilities

• Design, implement, and maintain enterprise cybersecurity solutions across Microsoft technologies.


• Engineer security controls required for CMMC Level 2/3 and NIST SP 800-171 compliance.


• Develop and maintain Microsoft Sentinel analytics, workbooks, automation rules, and incident response playbooks.


• Deploy and manage Microsoft Defender XDR technologies including Defender for Endpoint, Defender for Identity, Defender for Office 365, Defender for Cloud Apps, Microsoft Defender for Cloud


• Design and administer Microsoft Intune and endpoint security policies.


• Implement Conditional Access, Identity Protection, and Zero Trust security architectures using Microsoft Entra ID.


• Build security automation using Logic Apps, Power Automate, KQL, PowerShell, and Microsoft Graph.


• Develop advanced KQL queries for threat hunting, compliance reporting, and security monitoring.


• Partner with Infrastructure teams to harden Windows Server, Windows 11, Azure, and Microsoft 365 environments.


• Support vulnerability management and remediation coordination using tools such as Microsoft Defender Vulnerability Management, Tanium, or similar platforms.


• Participate in security architecture reviews and provide engineering guidance on new technologies.


• Support incident response activities during security investigations.


• Produce technical documentation, standards, and implementation guides.

Basic Qualifications (Required Skills & Experience):

• Bachelor’s degree in computer science, cyber security, or related STEM field; or equivalent combination of education and experience


• Minimum 8 – 12 years' experience in enterprise security engineering, with at least 3 years in a senior technical role


• Advanced knowledge of security frameworks and compliance standards (NIST, CMMC, DFARS, ITAR)


• Proven track record of leading large-scale security initiatives and architectural decisions


• Expert knowledge of Windows, Linux, and MacOS operating systems and enterprise networking concepts


• Experience leading incident response for critical security events


• Strong technical writing skills for documentation and policy development


• Strong scripting experience using PowerShell.


• Advanced Kusto Query Language (KQL) experience.


• Experience implementing security baselines and hardening standards.


• Excellent troubleshooting and analytical skills.


• Strong written and verbal communication abilities.

Demonstrated experience with:

• Experience supporting Defense Industrial Base (DIB) organizations


• Experience in Microsoft GCC High environments


• Experience with CMMC assessments or audit preparation


• Experience with Microsoft Purview


• Experience integrating third-party security platforms into Microsoft Sentinel


• KQL development and threat hunting


• Intune enterprise deployments


• Windows security engineering


• PowerShell automation


• Security architecture and Zero Trust implementation

Other Qualifications & Desired Competencies:

• Master’s degree in related field preferred


• Security certifications such as Microsoft Certified: CAE, CISSP, CISM or similar industry standard credentials are highly desired


• Self-starter capable of leading enterprise security initiatives


• Strong engineering mindset with an automation-first approach


• Ability to balance operational needs with regulatory compliance


• Comfortable working in fast-paced, highly regulated environments


• Excellent collaborator who can partner across Security, IT, Engineering, and Compliance teams


• Passion for continuous improvement and emerging cybersecurity technologies

Physical Demands

• Ability to work in an office environment


• Required to sit and stand for long periods; talk, hear, and use hands and fingers to operate a computer and telephone keyboard (Frequent)

Special Requirements:

• U.S. Citizen, U.S. Permanent Resident (Green Card holder) or asylee/refugee status as defined by 8 U.S.C. 1324b(a)(3) required.


• Occasionally may be required to travel within the Continental U.S.

Clearance Level

No Clearance

The salary range for this role is:

$111,500 - $170,000

AeroVironment considers several factors when extending an offer, including but not limited to, the location, the role and associated responsibilities, a candidate’s work experience, education/training, and key skills.

This position requires access to information that is subject to compliance with the International Traffic Arms Regulations (“ITAR”) and/or the Export Administration Regulations (“EAR”). In order to comply with the requirements of the ITAR and/or the EAR, applicants must qualify as a U.S. person under the ITAR and the EAR, or a person to be approved for an export license by the governing agency whose technology comes under its jurisdiction. Please understand that any job offer that requires approval of an export license will be conditional on AeroVironment’s determination that it will be able to obtain an export license in a time frame consistent with AeroVironment’s business requirements. A “U.S. person” according to the ITAR definition is a U.S. citizen, U.S. lawful permanent resident (green card holder), or protected individual such as a refugee or asylee. See 22 CFR § 120.15. Some positions will require current U.S. Citizenship due to contract requirements.

Benefits

Benefits: AV offers an excellent benefits package including medical, dental vision, 401K with company matching, a 9/80 work schedule and a paid holiday shutdown.

We also encourage you to review our company website at http://www.avinc.com to learn more about us.

About AV

AV isn’t for everyone. We hire the curious, the relentless, the mission-obsessed. The best of the best.

We don’t just build defense technology—we redefine what’s possible. As the premier autonomous systems company in the U.S., AV delivers breakthrough capabilities across air, land, sea, space, and cyber. From AI-powered drones and loitering munitions to integrated autonomy and space resilience, our technologies shape the future of warfare and protect those who serve.

Founded by legendary innovator Dr. Paul MacCready, AV has spent over 50 years pushing the boundaries of what unmanned systems can do. Our heritage includes seven platforms in the Smithsonian—but we’re not building history, we’re building what’s next.

If you’re ready to build technology that matters—with speed, scale, and purpose—there’s no better place to do it than AV.

We are proud to be an EEO/AA Equal Opportunity Employer, including disability/veterans. AeroVironment, Inc. is an Equal Employment Opportunity (EEO) employer and welcomes all qualified applicants. Qualified applicants will receive fair and impartial consideration without regard to race, sex, color, religion, national origin, age, disability, protected veteran status, genetic data, sexual orientation, gender identity or other legally protected status.

ITAR

U.S. Citizenship is required. Secret or Top Secret clearance, or the ability obtain a clearance is desired.