Senior Cybersecurity Engineer

AeroVironment•Washington, DC

1d•$111,500 - $170,000•Onsite

About The Position

The Senior Cyber Security Engineer is a key technical leader within the global Digital Business Technology team, responsible for driving security architecture decisions and providing strategic direction for the organization's security posture. This role requires deep expertise across multiple security domains, demonstrated leadership ability, and proven experience in designing and implementing enterprise-scale security solutions across cloud and on-premises environments.

Requirements

Bachelor’s degree in computer science, cyber security, or related STEM field; or equivalent combination of education and experience
Minimum 8 – 12 years' experience in enterprise security engineering, with at least 3 years in a senior technical role
Advanced knowledge of security frameworks and compliance standards (NIST, CMMC, DFARS, ITAR)
Proven track record of leading large-scale security initiatives and architectural decisions
Expert knowledge of Windows, Linux, and MacOS operating systems and enterprise networking concepts
Experience leading incident response for critical security events
Strong technical writing skills for documentation and policy development
Strong scripting experience using PowerShell.
Advanced Kusto Query Language (KQL) experience.
Experience implementing security baselines and hardening standards.
Excellent troubleshooting and analytical skills.
Strong written and verbal communication abilities.
U.S. Citizen, U.S. Permanent Resident (Green Card holder) or asylee/refugee status as defined by 8 U.S.C. 1324b(a)(3) required.
ITAR U.S. Citizenship is required.

Nice To Haves

Master's degree in related field preferred
Security certifications such as Microsoft Certified: CAE, CISSP, CISM or similar industry standard credentials are highly desired
Self-starter capable of leading enterprise security initiatives
Strong engineering mindset with an automation-first approach
Ability to balance operational needs with regulatory compliance
Comfortable working in fast-paced, highly regulated environments
Excellent collaborator who can partner across Security, IT, Engineering, and Compliance teams
Passion for continuous improvement and emerging cybersecurity technologies
Experience supporting Defense Industrial Base (DIB) organizations
Experience in Microsoft GCC High environments
Experience with CMMC assessments or audit preparation
Experience with Microsoft Purview
Experience integrating third-party security platforms into Microsoft Sentinel
KQL development and threat hunting
Intune enterprise deployments
Windows security engineering
PowerShell automation
Security architecture and Zero Trust implementation
Secret or Top Secret clearance, or the ability obtain a clearance is desired.

Responsibilities

Design, implement, and maintain enterprise cybersecurity solutions across Microsoft technologies.
Engineer security controls required for CMMC Level 2/3 and NIST SP 800-171 compliance.
Develop and maintain Microsoft Sentinel analytics, workbooks, automation rules, and incident response playbooks.
Deploy and manage Microsoft Defender XDR technologies including Defender for Endpoint, Defender for Identity, Defender for Office 365, Defender for Cloud Apps, Microsoft Defender for Cloud.
Design and administer Microsoft Intune and endpoint security policies.
Implement Conditional Access, Identity Protection, and Zero Trust security architectures using Microsoft Entra ID.
Build security automation using Logic Apps, Power Automate, KQL, PowerShell, and Microsoft Graph.
Develop advanced KQL queries for threat hunting, compliance reporting, and security monitoring.
Partner with Infrastructure teams to harden Windows Server, Windows 11, Azure, and Microsoft 365 environments.
Support vulnerability management and remediation coordination using tools such as Microsoft Defender Vulnerability Management, Tanium, or similar platforms.
Participate in security architecture reviews and provide engineering guidance on new technologies.
Support incident response activities during security investigations.
Produce technical documentation, standards, and implementation guides.