Senior Cybersecurity Engineer

AeroVironment•Dayton, OH

4d•$91,000 - $138,750•Onsite

About The Position

The Cybersecurity Engineer is responsible for supporting the organization's Vulnerability Management and Endpoint Security programs, with a primary focus on the administration, engineering, and optimization of Tanium. This position combines hands-on security engineering with vulnerability identification, prioritization, remediation, patch management, asset visibility, endpoint compliance, and security automation. The engineer will work closely with Cybersecurity Operations, IT Infrastructure, application owners, and business stakeholders to identify security exposures and drive vulnerabilities through remediation. The ideal candidate possesses strong technical troubleshooting skills, understands enterprise endpoint environments, and can translate vulnerability and asset data into actionable remediation activities.

Requirements

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field, or equivalent professional experience.
3+ years of cybersecurity, endpoint engineering, vulnerability management, systems administration, or related technical experience.
Hands-on experience administering or supporting Tanium in an enterprise environment.
Experience with vulnerability management and remediation processes.
Working knowledge of Windows enterprise environments.
Understanding of vulnerability scoring, CVSS, exploitability, and risk-based vulnerability prioritization.
Experience with enterprise patch-management processes.
Understanding of endpoint security technologies and architecture.
Strong troubleshooting and root-cause analysis skills.
Ability to analyze large amounts of endpoint and vulnerability data.
Ability to communicate technical risks and remediation requirements to technical and non-technical stakeholders.
Strong documentation and organizational skills.

Nice To Haves

Experience with several of the following is highly desirable: Tanium, Microsoft Defender Vulnerability Management, Microsoft Defender for Endpoint, Microsoft Intune, Linux, PowerShell, Python, REST APIs, SQL / data analytics, SIEM/XDR platforms
Experience supporting large, distributed enterprise environments is preferred.
Experience supporting aerospace, defense, manufacturing, government, or other regulated environments is also desirable.
Tanium Certified Operator
Tanium Certified Administrator
CompTIA Security+
CompTIA CySA+
GIAC certifications
Microsoft security certifications
Other relevant cybersecurity or endpoint-management certifications
Secret or Top Secret clearance, or the ability obtain a clearance is desired.

Responsibilities

Support the enterprise Vulnerability Management program across workstations, servers, cloud workloads, and other supported infrastructure.
Identify, analyze, validate, prioritize, and track vulnerabilities across the enterprise.
Use vulnerability intelligence, asset criticality, exploitability, business impact, and threat intelligence to prioritize remediation activities.
Perform risk-based vulnerability prioritization rather than relying solely on CVSS scores.
Monitor newly disclosed vulnerabilities, zero-day threats, CISA Known Exploited Vulnerabilities (KEV), and vendor security advisories.
Coordinate with IT, infrastructure, application, cloud, and system owners to remediate identified vulnerabilities.
Validate remediation and ensure vulnerabilities are successfully closed.
Identify recurring vulnerabilities and systemic remediation issues.
Develop vulnerability dashboards, metrics, KPIs, and executive reporting.
Support vulnerability remediation SLAs and exception/risk-acceptance processes.
Assist with vulnerability management requirements associated with NIST, CMMC, CIS, and other applicable security frameworks.
Serve as a technical administrator and subject matter resource for the Tanium platform.
Configure, maintain, troubleshoot, and optimize Tanium modules and services.
Develop and maintain Tanium sensors, questions, packages, actions, computer groups, dashboards, and reporting.
Use Tanium to identify hardware, software, operating systems, configurations, applications, and security posture across enterprise endpoints.
Develop dynamic computer groups to support security operations and targeted remediation.
Monitor Tanium client health, platform coverage, communication status, and endpoint participation.
Identify and remediate unhealthy, missing, stale, or non-communicating Tanium clients.
Support deployment, upgrade, and maintenance of the Tanium Client.
Troubleshoot Tanium Client, server, module, sensor, package, and action issues.
Maintain Tanium role-based access controls and administrative permissions.
Assist with platform upgrades, configuration changes, testing, and lifecycle management.
Administer and optimize Tanium Comply for vulnerability and configuration assessment.
Configure vulnerability assessments and compliance scans across supported endpoint populations.
Analyze vulnerability findings and identify affected systems.
Support configuration assessments against applicable CIS Benchmarks, DISA STIGs, and organizational security standards.
Develop dashboards and reports showing vulnerability exposure and remediation progress.
Correlate Tanium vulnerability information with other vulnerability and security platforms.
Investigate discrepancies between Tanium and other vulnerability scanners or asset-management systems.
Use Tanium data to validate remediation activities and identify residual exposure.
Support enterprise patch and vulnerability remediation activities using Tanium Patch and Deploy or integrated endpoint-management technologies.
Analyze missing patches and identify endpoints requiring remediation.
Develop and maintain patch deployment groups and maintenance windows.
Coordinate security patching with IT and system owners.
Support emergency remediation activities for critical and actively exploited vulnerabilities.
Test and validate security patches prior to broad deployment when appropriate.
Track patch deployment status, failures, exceptions, and remediation progress.
Troubleshoot failed patch installations and deployment issues.
Support automated remediation of vulnerabilities where technically and operationally appropriate.
Use Tanium to maintain accurate visibility into enterprise endpoint assets.
Identify unmanaged, unknown, stale, duplicate, or non-compliant devices.
Assist with reconciliation of Tanium data against CMDB, endpoint management, EDR, vulnerability management, and other asset sources.
Identify systems missing required security agents or controls.
Support security control coverage reporting for EDR, vulnerability scanning, patching, encryption, endpoint management, and other technologies.
Develop queries and dashboards that identify gaps in endpoint security coverage.
Assist with improving overall asset inventory accuracy and endpoint hygiene.
Develop scripts and automation to improve vulnerability management and endpoint security processes.
Use PowerShell, Python, APIs, or similar technologies to automate repetitive security tasks.
Integrate Tanium with SIEM/XDR, vulnerability management, ITSM, CMDB, and other enterprise security platforms.
Support automated ticket generation and remediation workflows for vulnerability findings.
Develop queries, dashboards, and reporting that provide actionable security information.
Identify opportunities to reduce manual remediation activities through automation.
Document technical configurations, procedures, standards, and operational processes.
Support Cybersecurity Operations during vulnerability-related incidents and emerging threats.
Rapidly identify systems affected by critical vulnerabilities or compromised software.
Use Tanium to query enterprise endpoints during incident investigations.
Support emergency containment or remediation actions when required.
Work with threat intelligence and SOC teams to determine organizational exposure to emerging threats.
Assist with identifying indicators, vulnerable software, configurations, or endpoint conditions associated with active threats.