Senior Cybersecurity Engineer

AV; Washington (District of Columbia); On-site; USD 111,500 - 170,000; Full time

Benefits offered by this job

Medical and dental coverage

401(k) with company matching

Paid holiday shutdown

Job summary

AV in Washington, D.C. is looking for a Senior Cyber Security Engineer to lead their security initiatives and enhance the organization's security posture. The role requires substantial experience in enterprise security, compliance with regulations, and proficiency in various Microsoft security tools and solutions.

The ideal candidate will have a track record of leading large-scale projects, strong analytical skills, and the ability to develop comprehensive security solutions. This position offers a competitive salary and great benefits.

Qualifications

• 8–12 years’ experience in enterprise security engineering, with at least 3 years in a senior technical role.
• Demonstrated expertise in security frameworks (NIST, CMMC).
• Ability to develop technical documentation and standards.

Responsibilities

• Design, implement, and maintain enterprise cybersecurity solutions.
• Engineer security controls for CMMC compliance.
• Support incident response activities during security investigations.

Skills

Enterprise security engineering

Advanced Kusto Query Language (KQL)

PowerShell scripting

Strong communication skills

Compliance standards knowledge

Incident response leadership

Regulatory compliance balancing

Education

Bachelor’s degree in computer science or related field

Tools

Microsoft Sentinel

Microsoft Defender technologies

Microsoft Intune

Job description

Senior Cyber Security Engineer

The Senior Cyber Security Engineer is a key technical leader within the global Digital Business Technology team, responsible for driving security architecture decisions and providing strategic direction for the organization’s security posture. This role requires deep expertise across multiple security domains, demonstrated leadership ability, and proven experience in designing and implementing enterprise-scale security solutions across cloud and on-premises environments.

Position Responsibilities

• Design, implement, and maintain enterprise cybersecurity solutions across Microsoft technologies.
• Engineer security controls required for CMMC Level 2/3 and NIST SP 800-171 compliance.
• Develop and maintain Microsoft Sentinel analytics, workbooks, automation rules, and incident response playbooks.
• Deploy and manage Microsoft Defender XDR technologies including Defender for Endpoint, Defender for Identity, Defender for Office 365, Defender for Cloud Apps, and Microsoft Defender for Cloud.
• Design and administer Microsoft Intune and endpoint security policies.
• Implement Conditional Access, Identity Protection, and Zero Trust security architectures using Microsoft Entra ID.
• Build security automation using Logic Apps, Power Automate, KQL, PowerShell, and Microsoft Graph.
• Develop advanced KQL queries for threat hunting, compliance reporting, and security monitoring.
• Partner with infrastructure teams to harden Windows Server, Windows 11, Azure, and Microsoft 365 environments.
• Support vulnerability management and remediation coordination using tools such as Microsoft Defender Vulnerability Management, Tanium, or similar platforms.
• Participate in security architecture reviews and provide engineering guidance on new technologies.
• Support incident response activities during security investigations.
• Produce technical documentation, standards, and implementation guides.

Basic Qualifications

• Bachelor’s degree in computer science, cyber security, or related STEM field; or equivalent combination of education and experience.
• Minimum 8–12 years’ experience in enterprise security engineering, with at least 3 years in a senior technical role.
• Advanced knowledge of security frameworks and compliance standards (NIST, CMMC, DFARS, ITAR).
• Proven track record of leading large-scale security initiatives and architectural decisions.
• Expert knowledge of Windows, Linux, and MacOS operating systems and enterprise networking concepts.
• Experience leading incident response for critical security events.
• Strong technical writing skills for documentation and policy development.
• Strong scripting experience using PowerShell.
• Advanced Kusto Query Language (KQL) experience.
• Experience implementing security baselines and hardening standards.
• Excellent troubleshooting and analytical skills.
• Strong written and verbal communication abilities.

Demonstrated Experience

• Experience supporting Defense Industrial Base (DIB) organizations.
• Experience in Microsoft GCC High environments.
• Experience with CMMC assessments or audit preparation.
• Experience with Microsoft Purview.
• Experience integrating third‑party security platforms into Microsoft Sentinel.
• KQL development and threat hunting.
• Intune enterprise deployments.
• Windows security engineering.
• PowerShell automation.
• Security architecture and Zero Trust implementation.

Other Qualifications & Desired Competencies

• Master’s degree in related field preferred.
• Security certifications such as Microsoft Certified: CAE, CISSP, CISM, or similar industry standard credentials highly desired.
• Self‑starter capable of leading enterprise security initiatives.
• Strong engineering mindset with an automation‑first approach.
• Ability to balance operational needs with regulatory compliance.
• Comfortable working in fast‑paced, highly regulated environments.
• Excellent collaborator who can partner across Security, IT, Engineering, and Compliance teams.
• Passion for continuous improvement and emerging cybersecurity technologies.

Physical Demands

• Ability to work in an office environment.
• Required to sit and stand for long periods; talk, hear, and use hands and fingers to operate a computer and telephone keyboard (Frequent).

Special Requirements

• U.S. Citizen, U.S. Permanent Resident (Green Card holder), or asylee/refugee status as defined by 8 U.S.C. 1324b(a)(3) required.
• May be required to travel within the Continental U.S. occasionally.

Clearance Level

No Clearance

Salary Range

$111,500 – $170,000

ITAR Requirement

This position requires access to information that is subject to compliance with the International Traffic Arms Regulations (“ITAR”) and/or the Export Administration Regulations (“EAR”). Applicants must qualify as a U.S. person under ITAR and/or EAR, or be approved for an export license. U.S. citizenship or permanent residency is required.

Benefits

AV offers an excellent benefits package including medical, dental, vision, 401(k) with company matching, a 9/80 work schedule, and a paid holiday shutdown.

Equal Opportunity Statement

We are proud to be an EEO/AA Equal Opportunity Employer, including disability/veterans. Qualified applicants will receive fair and impartial consideration without regard to race, sex, color, religion, national origin, age, disability, protected veteran status, genetic data, sexual orientation, gender identity, or other legally protected status.