Senior IT & Security Engineer

DroneShield Limited; Warrenton, Northern (VA, KY); Hybrid; USD 150,000 - 170,000; Full time

Job summary

DroneShield in Warrenton, VA, seeks a Senior IT & Security Engineer to own local IT operations and security engineering, supporting CMMC / NIST 800-171 compliance with global teams.

The role spans end-user support, identity and endpoint administration, network and security operations, and incident response, aligning with governance across the organization.

Qualifications

• 7+ years of experience across IT infrastructure, service management, and security-conscious operational environments.
• Hands-on experience in a security operations, systems security, or security engineering role, including incident response and control implementation.
• Working knowledge of CMMC 2.0 / NIST SP 800-171 requirements, with practical experience supporting implementation, evidence collection, remediation, or assessment readiness activities.
• Hands-on experience with security and device-management platforms such as EDR, SIEM, vulnerability management, and MDM / Intune.
• Experience managing firewalls, VPNs, network security, and secure system integrations.
• Proven hands-on experience with identity and access management using Microsoft Entra ID, including SSO, Conditional Access, MFA, group / role-based access, and application integration.
• Strong background in endpoint security, patch management, and system hardening using Mobile Device Management (MDM) platforms such as Microsoft Intune.
• Experience participating in or leading incident response, investigation, containment, and remediation activities.
• Comfort working across both hands-on user support and higher-order security / compliance priorities in a small-team, high-accountability environment.
• Excellent written and verbal communication skills.

Responsibilities

• Partner with global IT and Security teams to deliver reliable, secure IT services for the U.S. office and support the company’s broader security and compliance strategy.
• Own local IT service delivery, including ticket intake, prioritization, escalation, user communication, and SLA performance. Provide hands-on support for hardware, software, collaboration tools, and access issues, and serve as the primary escalation point for complex local IT and security incidents.
• Administer identity and access controls across users, devices, and applications using Microsoft Entra ID, including SSO, Conditional Access, MFA, and role-based access controls.
• Integrate business applications into the identity and security stack using SSO, MFA, Conditional Access, and modern authentication mechanisms such as FIDO2 passwordless authentication.
• Administer and continuously improve endpoint security controls, including device compliance, patching, system hardening, vulnerability remediation, encryption, and EDR / MDM tooling.
• Support and manage network security, including firewall management, secure network integrations, VPNs, and segmentation.
• In coordination with the Global Security Team, lead local incident triage and response activities for the U.S. office, including investigation, containment, remediation, evidence gathering, lessons learned, and post-incident reporting.
• Partner with the Global Security Team, business stakeholders, vendors, and external assessors to support CMMC / NIST 800-171 readiness activities, including technical control implementation, evidence collection, remediation tracking, and audit support.
• Help plan and manage the local IT and security budget, including tooling, hardware lifecycle, vendor services, and investment recommendations aligned to business and compliance priorities.

Skills

IT infrastructure

Security operations

Security engineering

Incident response

CMMC 2.0 / NIST SP 800-171

IAM / Entra ID

MFA / SSO / CA

MDM / Intune

EDR / SIEM

Firewalls / VPNs

Endpoint security

Education

Tools

EDR

SIEM

Vulnerability management

MDM / Intune

Microsoft Entra ID

Job description

Back to jobs

Senior IT & Security Engineer

Warrenton, VA United States

Work withcutting-edgeAI technology that helps make the world a safer and more secure place. DroneShield (ASX:DRO) develops market-leading counter-drone solutions used by militaryorganisations, government agencies, airports, critical infrastructure operators, and law enforcementoperatingin some of the most challenging and high-stakes environments in the world. Employees work at the forefront of innovation, solving complex technical problems and delivering mission-critical capabilities where performance, reliability, and speed matter.

As an ASX200-listed company and theworld'sonly publicly listed pure-play counter-drone business, DroneShield is experiencing rapid growth. Revenue increased from A$57 million in 2024 to more than A$217 million in 2025, supported by record profitability, a global sales pipeline exceeding A$2.5 billion, and annual R&D investment of over A$50 million.

Since 2017, DroneShield has grown from 11 employees to more than 550 globally, with operations across Australia, the United States, Europe, and the Middle East, supporting customers in over 70 countries.

DroneShield'sU.S. headquarters in Warrenton, Virginia, supports American customers through locally based R&D, sales, customer support, and engagement withdefenceand security stakeholders.

About the role

The Senior IT & Security Engineer is the primary local owner for the Warrenton office’s IT operations and security engineering, with responsibility for supporting CMMC / NIST 800-171 control implementation and audit readiness. This role is hands-on and spans end-user support, identity and endpoint administration, network and security operations, local incident response, and compliance execution. The position works closely with DroneShield’s global IT and Security teams in Sydney, which provide broader governance, shared services, and partnership on global initiatives.

This is a high-ownership, hands-on role requiring strong technical depth, sound judgment, clear prioritization, and the ability to operate across IT operations, security engineering, and compliance.

Responsibilities, Duties and Expectations

• Partner with global IT and Security teams to deliver reliable, secure IT services for the U.S. office and support the company’s broader security and compliance strategy.
• Own local IT service delivery, including ticket intake, prioritization, escalation, user communication, and SLA performance. Provide hands-on support for hardware, software, collaboration tools, and access issues, and serve as the primary escalation point for complex local IT and security incidents.
• Administer identity and access controls across users, devices, and applications using Microsoft Entra ID, including SSO, Conditional Access, MFA, and role-based access controls.
• Integrate business applications into the identity and security stack using SSO, MFA, Conditional Access, and modern authentication mechanisms such as FIDO2 passwordless authentication.
• Administer and continuously improve endpoint security controls, including device compliance, patching, system hardening, vulnerability remediation, encryption, and EDR / MDM tooling.
• Support and manage network security, including firewall management, secure network integrations, VPNs, and segmentation.
• In coordination with the Global Security Team, lead local incident triage and response activities for the U.S. office, including investigation, containment, remediation, evidence gathering, lessons learned, and post-incident reporting.
• Partner with the Global Security Team, business stakeholders, vendors, and external assessors to support CMMC / NIST 800-171 readiness activities, including technical control implementation, evidence collection, remediation tracking, and audit support.
• Help plan and manage the local IT and security budget, including tooling, hardware lifecycle, vendor services, and investment recommendations aligned to business and compliance priorities.

Qualifications, Experience and Skills

• 7+ years of experience across IT infrastructure, service management, and security-conscious operational environments.
• Hands-on experience in a security operations, systems security, or security engineering role, including incident response and control implementation.
• Working knowledge of CMMC 2.0 / NIST SP 800-171 requirements, with practical experience supporting implementation, evidence collection, remediation, or assessment readiness activities.
• Hands-on experience with security and device-management platforms such as EDR, SIEM, vulnerability management, and MDM / Intune.
• Experience managing firewalls, VPNs, network security, and secure system integrations.
• Proven hands-on experience with identity and access management using Microsoft Entra ID, including SSO, Conditional Access, MFA, group / role-based access, and application integration.
• Strong background in endpoint security, patch management, and system hardening using Mobile Device Management (MDM) platforms such as Microsoft Intune.
• Experience participating in or leading incident response, investigation, containment, and remediation activities.
• Comfort working across both hands-on user support and higher-order security / compliance priorities in a small-team, high-accountability environment.
• Excellent written and verbal communication skills.

Preferred Experience

• Experience updating policies, procedures, standards, and technical documentation to support audit readiness and operational consistency.
• Experience working in the United States Defense Industrial Base.
• Experience supporting organizations requiring facility clearances.
• Experience with Microsoft Government Community Cloud (GCC) platforms.
• Security or IT certifications (e.g., CISSP, CISM, Security+, CMMC-RP, ITIL).
• Experience developing and maintaining IT and security budgets.
• Practical understanding of governance, risk, and compliance concepts and how they translate into technical and operational controls.

Note for recruitment agencies: We do not accept unsolicited candidates from external recruiters unless specifically instructed.

Data Privacy

DroneShield Group Pty Ltd collects and processes personal information for recruitment and hiring purposes. Where applicable, personal information is processed on the basis of DroneShield's legitimate interests in assessing and selecting candidates for employment. For further information regarding how we collect, use, disclose, store and retain personal information, including your privacy rights, please refer to our Privacy Policy: https://www.droneshield.com/privacy-policy

This is an anticipated salary range for this role in Virginia. Actual salary varies due to factors that may include but not limited to relevant experience, skills, certifications and location.

$150,000 - $170,000 USD

U.S. Standard Demographic Questions

We invite applicants to share their demographic background. If you choose to complete this survey, your responses may be used to identify areas of improvement in our hiring process. How would you describe your gender identity? Select... How would you describe your racial/ethnic background? Select... How would you describe your sexual orientation? Select... Do you identify as transgender? Select... Do you have a disability or chronic condition (physical, visual, auditory, cognitive, mental, emotional, or other) that substantially limits one or more of your major life activities, including mobility, communication (seeing, hearing, speaking), and learning? Select... Are you a veteran or active member of the United States Armed Forces? Select...

DroneShield proudly supports employment of veterans in our Australian and U.S. offices and welcomes role applications from them.
We encourage all applicants to voluntarily share details of prior military service.
We foster a diverse workplace, with focus on multicultural teams, flexibility in the workplace, and a supportive environment.