Principal Security Engineer

Principal Security EngineerFTAI owns and maintains commercial jet engines with a focus on the Maintenance, Repair and Exchange (MRE) of CFM56 and V2500 engines. FTAI's propriety portfolio of products, including The Module Factory and a joint venture to distribute engine PMA helps make CFM56 and V2500 engine maintenance simpler, more cost-effective, significantly faster, and more environmentally friendly. Additionally, FTAI owns and leases jet aircraft which often facilitates the acquisition of engines at attractive prices. FTAI invests in aviation assets and aerospace products that generate strong and stable cash flows with the potential for earnings growth and asset appreciation.FTAI operates globally and has offices in New York, Miami, Montreal, California, Singapore, Dubai, United Kingdom and Ireland.Job OverviewWe are seeking a Principal Security Engineer to lead the security program for a public, multi-site organization in a regulated environment. This is a hands-on individual-contributor role that both implements technical controls and drives the policies behind them. Partnering with the MSP, vCISO, IT, and Legal, you will set technical direction and execute it—tuning controls, maturing policy, and aligning the program to recognized frameworks and regulatory requirementsResponsibilities:Drive the technical cybersecurity strategy and roadmap; report security posture and material risk to senior leadershipDesign, configure, and maintain hands-on controls across network, endpoint, identity, and cloud (firewall rules, segmentation, VPNs, IDS/IPS, EDR, MFA)Develop and maintain security policies aligned to NIST CSF, ISO 27001, and CIS and to regulatory requirements, ensuring controls actually enforce themManage and tune the security stack (SIEM, EDR, email security); build detection rules, alerts, and dashboardsLead incident response end to end and drive risk-based vulnerability and patch management to closure across infrastructure, endpoints, and cloudOwn the controls framework and third-party/vendor risk program, coordinating with internal audit/GRC and the legal teamCollaborate with MSP and vCISO (managing scope, SLAs, escalation) while keeping core decisions in-houseHarden identity infrastructure (AD/Entra ID) and run the security awareness program across sitesQualifications:7+ years across IT and cybersecurity, including a hands-on technical foundation and 3+ years driving a security program as a senior individual contributorProven ability to both implement technical controls and author the policies and governance behind themExperience securing a public and/or regulated, multi-site environment (e.g., SOX, FINRA, FAA), including audit and control ownershipCommand of NIST CSF, ISO 27001, CIS, and SOX/ITGC, with experience owning control evidence through external auditsStrong cloud (Azure and/or AWS) and enterprise network security—firewalls, VPNs, segmentation, and IDS/IPSHands-on with SIEM (e.g., Microsoft Sentinel) and endpoint protection (e.g., SentinelOne), plus scripting (PowerShell and/or Python) and identity hardening (AD/Entra ID)