Cyber Security Engineer

Global Ordnance•Sarasota, FL

About The Position

Global Ordnance is seeking a skilled and experienced Cybersecurity Engineer to help protect the organization’s sensitive data and systems. The role contributes to strengthening the organization’s security posture, minimizing risk, maintaining compliance, and supporting security awareness. It calls for a proactive, detail-oriented professional with broad technical capabilities in data loss prevention, multi-tenant SharePoint administration, Microsoft 365 and GCC High security, data classification and migration, and vulnerability management. The engineer will work both independently and collaboratively, communicate technical concepts to technical and non-technical stakeholders, and manage multiple priorities in a fast-paced environment. The position develops and maintains security policies and controls, monitors and responds to security alerts and incidents, and supports compliance with frameworks and regulations including NIST 800-171 Rev 3, ISO 27001, GDPR, and UK Cyber Essentials. It also supports SharePoint administration across three tenants, implementation of a new GCC High tenant, secure data tagging and migration, vulnerability remediation, and security awareness training. Candidates must qualify as an Authorized US Person under ITAR and hold a current US Government Secret clearance or higher. The job requires a bachelor’s degree in Computer Science, Cybersecurity, or a related field, and 1 to 3 years of relevant experience. Domestic travel may be required. The role includes occasional lifting or exertion up to 25 pounds, frequent lifting or exertion up to 10 pounds, and regular computer and office-equipment use.

Requirements

Meet Authorized US Person criteria under ITAR as a US citizen, lawful permanent resident, or other qualifying protected authorized asylee; candidates must not be otherwise disbarred from access to ITAR-controlled information.
Hold a current US Government Secret clearance or higher.
Bachelor’s degree in Computer Science, Cybersecurity, or a related field.
One to three years of relevant experience.
Proven experience in cybersecurity engineering, preferably in a regulated industry.
Strong understanding of cybersecurity frameworks and regulations, such as NIST, ISO 27001, and HIPAA, and experience with GRC tools.
Expertise in data loss prevention technologies.
Extensive SharePoint administration experience, including multi-tenant environments.
Hands-on experience with Microsoft 365 security features.
Knowledge of data tagging and classification techniques.
Demonstrated ability to build and maintain relationships with government officials, defense organizations, and industry stakeholders.
Excellent communication, negotiation, and presentation skills.
Strong analytical and problem-solving skills and a self-starter approach.
Ability to work independently and as part of a team in a fast-paced, dynamic environment.
Willingness to travel domestically.
Proficiency with Microsoft Office, including Word, Excel, Outlook, PowerPoint, and Project.
Ability to walk and stand, use computers, occasionally lift or exert upwards of 25 pounds, and frequently lift or exert 10 pounds.
Ability to regularly spend long hours sitting and using office equipment and computers, and to move effortlessly between sitting and standing.

Nice To Haves

GCC High implementation and management experience.
Relevant degrees, skilled trades certifications, or licenses.
Experience with the DoD acquisition process and DoD contracting requirements.
ISO 9001:2015 training.
Relevant certifications, such as CISSP, CISM, Security+, or Microsoft certifications.
Experience with scripting languages such as PowerShell or Python.
Knowledge of cloud security best practices.
Experience with security information and event management (SIEM) systems.

Responsibilities

Develop, implement, maintain, review, and update cybersecurity policies, procedures, and standards in accordance with best practices and applicable regulatory requirements.
Ensure compliance with relevant regulations and frameworks, including NIST 800-171 Rev 3, ISO 27001, GDPR, and UK Cyber Essentials.
Design, implement, and manage data loss prevention solutions; monitor alerts, investigate potential data breaches, and tune policies to reduce false positives.
Administer SharePoint environments across three tenants, including user access, permissions, security settings, policy enforcement, and security troubleshooting.
Assist with planning, implementation, and configuration of a new GCC High tenant, applying security best practices and collaborating on integrations with existing systems.
Implement data tagging strategies to classify sensitive information in alignment with best practices and compliance programs.
Plan and execute secure data migration projects, maintaining data integrity and security; automate tagging and migration where possible.
Automate processes and workflows for secure sharing with vetted and approved users.
Monitor security alerts and vulnerability scans, analyze reports, prioritize remediation, apply patches and fixes, and track and report remediation progress.
Respond to security incidents and breaches.
Contribute to developing and delivering security awareness training and educate employees on cybersecurity best practices.
Collaborate with IT teams and business units to integrate security across the organization.
Communicate with technical and non-technical stakeholders and provide regular updates on security status and initiatives.
Perform other work as directed by Management.