Senior Cybersecurity Engineer
About The Position
Vaylent is a Cerberus-backed aerospace and defense manufacturing platform building the enterprise infrastructure, capabilities, and operational foundation to support a growing network of manufacturing companies, including Votaw Precision Technologies. Through its operating companies, Vaylent supports demanding aerospace, defense, and industrial programs by combining advanced manufacturing expertise with scalable business and technology infrastructure. This position reports directly to the Chief Information Officer and carries platform-wide technical scope across all Vaylent operating environments. It is a senior individual-contributor role with meaningful technical ownership and direct access to decision-making. This is an engineering role. You will spend your time inside the technology — identifying weaknesses, designing controls, implementing them and validating that they work. It is not a SOC analyst role, and it is not a GRC or documentation role. You own security requirements, architecture, standards, baselines, and technical validation. Infrastructure and network engineering owns operation of the underlying infrastructure. In shared areas — firewall policy, segmentation, secure remote access, identity, cloud — the teams design and sustain controls jointly. You will spend your time inside the technology — identifying weaknesses, designing controls, implementing them and validating that they work.
Requirements
- Bachelor’s degree in Cybersecurity, IT, Computer Science, Engineering, or a related discipline and 6+ years of relevant experience.
- Graduate degree in a related discipline and 4+ years of relevant experience.
- 10+ years of directly relevant experience in lieu of a degree.
- Hands-on experience in cybersecurity engineering, infrastructure security, or security-focused systems administration.
- Working knowledge of Microsoft security technologies — Entra ID, Defender, Intune, Conditional Access, MFA, Active Directory, or comparable platforms.
- Experience with vulnerability management, secure configuration, and system hardening.
- Working knowledge of network security — segmentation, firewalls, VPNs, secure remote access — and cloud-security principles including IAM, encryption, logging, and least privilege.
- The ability to investigate complex security issues independently and implement practical fixes.
- U.S. persons as defined by ITAR.
Nice To Haves
- Aerospace, defense, federal contracting, or regulated manufacturing background.
- Microsoft 365 GCC High, Azure Government, or AWS GovCloud experience.
- NIST SP 800-171 or CMMC Level 2 implementation experience.
- Experience securing manufacturing, OT, IoT, or CNC environments.
- PowerShell, Python, or infrastructure-as-code experience.
- Certifications such as Security+, CySA+, CISSP, CCSP, GIAC, Microsoft Security, or AWS Security are welcome but not required.
- An active or recently active DoD Secret clearance is a plus.
Responsibilities
- Security engineering across Microsoft 365, Entra ID, Defender, Intune, Active Directory, and Windows environments.
- Conditional Access, MFA, privileged access, identity protection, and device compliance.
- Security architecture and controls in Microsoft 365 GCC High and AWS GovCloud.
- Technical ownership of the vulnerability-management lifecycle, from identification and prioritization through remediation coordination and validation.
- Secure configuration standards and hardening for Windows, Linux, network devices, endpoints, and cloud services.
- Technical partnership with a 24×7 managed SOC/MDR provider. The provider handles continuous monitoring and initial alert triage; you own internal escalation, investigation, containment coordination, and remediation.
- Security requirements for network segmentation, firewall policy, and secure remote access, in partnership with infrastructure and network engineering.
- Cybersecurity across manufacturing, OT, IoT, and CNC environments, balanced against production availability and safety.
- Technical controls supporting NIST SP 800-171 and CMMC Level 2.
- Secure integration of newly acquired companies, facilities, and networks.
- Close partnership with infrastructure and network engineering, platform systems administration, enterprise applications, and site IT support.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
