Senior Cybersecurity Engineer

Senior Cybersecurity Engineer

Mirion is seeking a motivated and experienced Senior Cybersecurity Engineer to support design and integration efforts of Mirion's enterprise cyber security program, with a particular emphasis on network security. This role is part of the enterprise cybersecurity team and will take technical direction from and work collaboratively with Mirion's Chief Cybersecurity Architect. The Senior Cybersecurity Engineer is typically excluded from day-to-day operational responsibilities and focuses instead on long-term capability deployment and maturation.

This position is based in the United States and is fully remote, reporting to the Sr. Manager of Cybersecurity Operations.

Primary Responsibilities

• Perform design and integration efforts in association with the Mirion Cyber Security program covering areas such as:

• Network Security (next-gen firewalls, Zero Trust Network Access (ZTNA), Secure Access Service Edge (SASE), IDS/IPS, network security monitors, full packet capture, VPNs/Encryption).
• Cloud Security (IAM roles, conditional access policies, CASB, SaaS).
• Engineering support for the buildout and operation of a USG Export Compliant and Cyber Security Maturity Model Certified (CMMC) enclave.
• Endpoint Security (Anti-Malware, endpoint firewall, Removable Media Protection, Encryption at Rest, EDR, Forensic Acquisition).
• Collaboration Security (Email, MS Teams, SharePoint, Large File Transfer).
• Mobile Device Security (MDM, MAM).
• Vulnerability Management (SAST, DAST, General VM Scanning).
• IAM and Strong Auth (Active Directory, SAML, SSO, privileged access management, MFA).
• Deception Technologies (Honey Pots, Honey Tokens, Deception Accounts).

• Lead the design, deployment, and lifecycle management of enterprise firewall, Zero Trust Network Access (ZTNA), and Secure Access Service Edge (SASE) architectures to modernize and secure network access for a distributed, remote workforce.
• Perform Analysis of Alternatives (AoA) processes for cyber product and vendor selection as needed.
• Integration efforts will be completed in association with IT and Cyber operational staff, business representatives, and sourcing partners.
• Developing cybersecurity documentation such as procedures, diagrams, and knowledge base articles associated with capability deployment and maturation efforts and transitioning new capabilities to operations teams.
• Perform other cybersecurity architecture, engineering, and operations work as assigned.

Required Qualifications and Experience

• Bachelor's degree in information technology, information security, or related field or equivalent practical experience.
• Experience: 8+ years in a cybersecurity-focused role, with significant exposure to cybersecurity architecture, engineering, and operations.
• Strong communications skills and a collaborative working style.
• Familiarity with cybersecurity frameworks such as ISO 27001, NIST 800-171, SOC 2, and Cyber Essentials
• Familiarity with cyber industry regulations such as DFARS, HIPPA, SOX, GDRP, NIS2, and CRA.
• Expert level engineering experience with network security, including firewalls, Zero Trust Network Access (ZTNA), and Secure Access Service Edge (SASE).
• Expert level understanding of cybersecurity concepts and best practices.

Desired Qualifications and Experience

• Hands-on experience designing, deploying, and managing next-generation firewall platforms.
• Experience in industrial/manufacturing industry (OCS/OT/ICS solutions)
• Experience with Azure and AWS cloud security.
• Experience with securing various common SaaS offerings such as ServiceNow, Salesforce, and D365.
• Experience with securing IOT devices and mobility platforms.
• Experience with network segmentation and micro segmentation.
• Experience with application allow-listing/application control.
• Experience with technology and deployments supporting encryption in motion and encryption at rest.