Senior Cybersecurity Engineer Specialist

Concurrent Technologies Corporation•Johnstown, PA

2d•Onsite

About The Position

Concurrent Technologies Corporation (CTC), an independent, nonprofit applied scientific research and development organization, is seeking a Senior Cybersecurity Engineer to join its internal Information Technology team. This senior-level role is responsible for strengthening and advancing the organization's cybersecurity posture by providing technical leadership across enterprise security initiatives, cloud technologies, identity and access management, endpoint protection, vulnerability management, and data security. You will work closely with cross-functional teams to develop innovative security solutions that protect critical business systems while enabling CTC's mission to deliver advanced technology solutions for government and industry. The ideal candidate is an experienced cybersecurity professional with a strong background in Microsoft security technologies, Azure Government, Microsoft 365, and enterprise security operations. This individual will serve as a trusted technical expert, driving security improvements, evaluating emerging threats and technologies, and helping shape cybersecurity strategy through automation, secure architecture, and modern security best practices. Success in this role requires strong analytical and problem-solving skills, a collaborative mindset, and the ability to communicate complex technical concepts to both technical and non-technical stakeholders while supporting compliance with government and industry cybersecurity standards.

Requirements

Bachelor's or Master's degree in Cybersecurity, Computer Science, Information Technology, or a related field.
4-6 years of hands-on experience in a Cyber Security analyst or related IT or cyber engineer role.
Ability to obtain and maintain Secret government security clearance.
Demonstrated experience with Microsoft M365, Azure, or AWS cloud security components (e.g. Defender for Identy and Endpoint, Purview, Intune, Azure, EntraID)
Demonstrated ability to script and use command line interfaces with PowerShell, Python, or similar language.
Solid grasp of networking, operating system security (Windows-centric), and cloud security fundamentals.
Excellent verbal and written communication skills with the ability to explain and document technical information for a non-technical audience.
Proven ability to approach complex problems with a structured, analytical, and inquisitive mindset.

Nice To Haves

Relevant certifications such as CISSP, CISM, Security+, Microsoft SC-200/SC-300/AZ-500, or CEH.
Experience operating in AzureGov or other government/regulated cloud environments.
Familiarity with DevSecOps practices and secure CI/CD pipeline tooling (SAST/DAST/SCA).
Experience with Linux, macOS, and Windows in a heterogeneous network environment.
Understanding of security frameworks such as NIST 800-171 or 800-53, NIST Cybersecurity Framework, and CIS Controls.
Knowledge of CMMC, FedRAMP, or NIST compliance requirements.
Experience assessing security risks associated with AI/generative AI technologies.
Background in incident response and threat hunting.

Responsibilities

Participate in incident response activities, continuous monitoring, and the development of security standards and procedures in collaboration with internal cyber, IT, development, and data security teams.
Perform threat hunting by analyzing threat feeds from various government and commercial sources and leveraging Rapid7 Insight VM and Microsoft Cloud tools to scan, prioritize, and remediate vulnerabilities across on-premises and cloud assets.
Administer endpoint security systems (Microsoft Defender for Endpoint, SentinelOne, Intune, EntraID, Azure) for threat detection, investigation, and automated response across enterprise devices with a focus on compliance policies, configuration profiles, and conditional access enforcement.
Support and harden Microsoft Entra ID configurations, including conditional access, multi-factor authentication, privileged identity management, and identity governance.
Apply, monitor, and enforce security best practices across AzureGov cloud services and Microsoft 365, ensuring alignment with government compliance frameworks (e.g., FedRAMP, NIST 800-171, CMMC as applicable).
Configure and manage Microsoft Purview data loss prevention (DLP), insider risk management and support compliance and eDiscovery initiatives, ensuring data governance policies are enforced across the M365 environment.
Collaborate with development and DevOps teams to embed security into the software development lifecycle (SDLC), including secure coding practices, code review, and dependency scanning.
Evaluate security considerations associated with the adoption of AI and generative AI tools, including data leakage, prompt injection, model misuse, and shadow AI risks while contributing to the development of AI usage guardrails and monitoring practices aligned with emerging federal AI security guidance.