Senior IT & Security Engineer

DroneShield; Warrenton (VA); On-site; USD 150,000 - 170,000; Full time

Job summary

DroneShield, a global counter-drone leader, seeks a Senior IT & Security Engineer to own Warrenton’s IT operations and security engineering. You will implement and audit CMMC/NIST 800-171 controls, support end-user IT, identity management, and incident response.

You’ll work closely with global IT and Security teams to align local priorities with corporate governance, risk management, and compliance requirements in a high-accountability environment.

Qualifications

• 7+ years of experience across IT infrastructure, service management, and security-conscious environments.
• Hands-on experience in security operations, systems security, or security engineering.
• Working knowledge of CMMC 2.0 / NIST SP 800-171 requirements with practical experience.
• Hands-on experience with EDR, SIEM, vulnerability management, and MDM/Intune.
• Experience managing firewalls, VPNs, and secure network integrations.
• Proven experience with Microsoft Entra ID, SSO, CA, MFA, and role-based access.
• Strong endpoint security, patching, and system hardening with MDM (Intune).
• Experience in incident response, investigation, containment, remediation.
• Capable of balancing hands-on work with higher-priority security tasks in a small team.
• Excellent written and verbal communication skills.

Responsibilities

• Deliver reliable, secure IT services for the U.S. office and support the company’s security strategy.
• Own local IT service delivery, including ticketing, prioritization, escalation, and SLA performance.
• Provide hands-on support for hardware, software, and access issues; act as escalation point.
• Administer identity and access controls across users and devices using Entra ID (SSO, MFA).
• Integrate business apps with SSO, MFA, CA, and modern authentication mechanisms.
• Administer endpoint security controls, including patching and hardening via MDM/Intune.
• Manage network security, firewall, VPNs, and secure integrations.
• Lead local incident triage and response, with investigation, containment, remediation, and reports.
• Support CMMC/NIST readiness activities, including evidence collection and remediation tracking.
• Plan and manage the local IT/security budget aligned to priorities.

Skills

IT infrastructure

Security operations

CMMC 2.0 / NIST SP 800-171

EDR / SIEM / vulnerability mgmt / MDM

Firewall & VPN management

Identity & access management (Entra ID

Endpoint security & patching

Incident response

Cross-functional collaboration

Technical communication

Job description

Work with cutting-edge AI technology that helps make the world a safer and more secure place. DroneShield (ASX:DRO) develops market-leading counter-drone solutions used by military organisations, government agencies, airports, critical infrastructure operators, and law enforcement operating in some of the most challenging and high-stakes environments in the world. Employees work at the forefront of innovation, solving complex technical problems and delivering mission-critical capabilities where performance, reliability, and speed matter.

As an ASX200-listed company and the world's only publicly listed pure-play counter-drone business, DroneShield is experiencing rapid growth. Revenue increased from A$57 million in 2024 to more than A$217 million in 2025, supported by record profitability, a global sales pipeline exceeding A$2.5 billion, and annual R&D investment of over A$50 million.

Since 2017, DroneShield has grown from 11 employees to more than 550 globally, with operations across Australia, the United States, Europe, and the Middle East, supporting customers in over 70 countries.

DroneShield's U.S. headquarters in Warrenton, Virginia, supports American customers through locally based R&D, sales, customer support, and engagement with defence and security stakeholders.

About The Role

The Senior IT & Security Engineer is the primary local owner for the Warrenton office’s IT operations and security engineering, with responsibility for supporting CMMC / NIST 800-171 control implementation and audit readiness. This role is hands‑on and spans end‑user support, identity and endpoint administration, network and security operations, local incident response, and compliance execution. The position works closely with DroneShield’s global IT and Security teams in Sydney, which provide broader governance, shared services, and partnership on global initiatives.

This is a high‑ownership, hands‑on role requiring strong technical depth, sound judgment, clear prioritization, and the ability to operate across IT operations, security engineering, and compliance.

Responsibilities, Duties And Expectations

• Partner with global IT and Security teams to deliver reliable, secure IT services for the U.S. office and support the company’s broader security and compliance strategy.
• Own local IT service delivery, including ticket intake, prioritization, escalation, user communication, and SLA performance. Provide hands‑on support for hardware, software, collaboration tools, and access issues, and serve as the primary escalation point for complex local IT and security incidents.
• Administer identity and access controls across users, devices, and applications using Microsoft Entra ID, including SSO, Conditional Access, MFA, and role‑based access controls.
• Integrate business applications into the identity and security stack using SSO, MFA, Conditional Access, and modern authentication mechanisms such as FIDO2 passwordless authentication.
• Administer and continuously improve endpoint security controls, including device compliance, patching, system hardening, vulnerability remediation, encryption, and EDR / MDM tooling.
• Support and manage network security, including firewall management, secure network integrations, VPNs, and segmentation.
• In coordination with the Global Security Team, lead local incident triage and response activities for the U.S. office, including investigation, containment, remediation, evidence gathering, lessons learned, and post‑incident reporting.
• Partner with the Global Security Team, business stakeholders, vendors, and external assessors to support CMMC / NIST 800-171 readiness activities, including technical control implementation, evidence collection, remediation tracking, and audit support.
• Help plan and manage the local IT and security budget, including tooling, hardware lifecycle, vendor services, and investment recommendations aligned to business and compliance priorities.

Qualifications, Experience And Skills

• 7+ years of experience across IT infrastructure, service management, and security‑conscious operational environments.
• Hands‑on experience in a security operations, systems security, or security engineering role, including incident response and control implementation.
• Working knowledge of CMMC 2.0 / NIST SP 800-171 requirements, with practical experience supporting implementation, evidence collection, remediation, or assessment readiness activities.
• Hands‑on experience with security and device‑management platforms such as EDR, SIEM, vulnerability management, and MDM / Intune.
• Experience managing firewalls, VPNs, network security, and secure system integrations.
• Proven hands‑on experience with identity and access management using Microsoft Entra ID, including SSO, Conditional Access, MFA, group / role‑based access, and application integration.
• Strong background in endpoint security, patch management, and system hardening using Mobile Device Management (MDM) platforms such as Microsoft Intune.
• Experience participating in or leading incident response, investigation, containment, and remediation activities.
• Comfort working across both hands‑on user support and higher‑order security / compliance priorities in a small‑team, high‑accountability environment.
• Excellent written and verbal communication skills.

Preferred Experience

• Experience updating policies, procedures, standards, and technical documentation to support audit readiness and operational consistency.
• Experience working in the United States Defense Industrial Base.
• Experience supporting organizations requiring facility clearances.
• Experience with Microsoft Government Community Cloud (GCC) platforms.
• Security or IT certifications (e.g., CISSP, CISM, Security+, CMMC‑RP, ITIL).
• Experience developing and maintaining IT and security budgets.
• Practical understanding of governance, risk, and compliance concepts and how they translate into technical and operational controls.

Data Privacy

DroneShield Group Pty Ltd collects and processes personal information for recruitment and hiring purposes. Where applicable, personal information is processed on the basis of DroneShield's legitimate interests in assessing and selecting candidates for employment. For further information regarding how we collect, use, disclose, store and retain personal information, including your privacy rights, please refer to our Privacy Policy: https://www.droneshield.com/privacy-policy

This is an anticipated salary range for this role in Virginia. Actual salary varies due to factors that may include but not limited to relevant experience, skills, certifications and location.

$150,000—$170,000 USD