Cybersecurity Engineer, Sr. (Azure heavy)

The Senior Cybersecurity Engineer will act as the primary architect of our organization’s digital defense, bridging the gap between Enterprise IT, Cloud Development, and Operational Technology (OT). This role is responsible for operationalizing our security strategy, advising our software development pipeline, and advising on the protection of industrial control systems. You will lead the technical implementation of CMMC 2.0 compliance while ensuring our manufacturing and cloud applications remain resilient against modern threats. Duties and Responsibilities Secure Microsoft Azure environments by managing Entra ID (Identity), Defender for Cloud, and Sentinel. Configure and audit conditional access policies and resource grouping. Own the roadmap to CMMC Level 2 assessment readiness. Manage the System Security Plan (SSP) and Plan of Action and Milestones (POAMs) specifically for Defense Industrial Base (DIB) requirements. Conduct continuous security risk assessments, bridging the gap between technical vulnerabilities (CVSS scores) and business impact. Oversee the lifecycle of vulnerability management, from scanning to patch verification, working closely with infrastructure teams to minimize downtime. Develop and enforce policies regarding the use of Generative AI tools (LLMs) within the enterprise to prevent data leakage and IP loss. Collaborate with development teams to integrate security scanners (SAST/DAST) into the CI/CD pipeline, ensuring Security by Design. Translate complex cyber metrics into a "Risk Scorecard" for leadership, highlighting ROI on security investments and current threat levels. Champion security awareness training, running phishing simulations and tabletop exercises to build organizational resilience. Engage with key stakeholders in the development of contingency plans, business continuity strategies, and disaster recovery efforts, ensuring our organization's resilience. Qualifications Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. Education, Experience and Certifications Bachelor’s degree in Computer Science, Information Systems, or related field. 6+ years of technical security experience. 2+ years specifically managing cloud security (Azure preferred). Proven experience preparing an organization for CMMC, NIST 800-171, or ISO 27001 audits. Skills and Abilities Expert knowledge of NIST 800-171, CMMC 2.0, and SOC 2 standards. Ability to manage risk assessments and threat modeling. Skilled in writing technical policies, procedures, and SSPs. Experience coordinating third-party audits and external assessments. Knowledge of DevSecOps pipelines and OT/Industrial security. Ability to work independently and handle ambiguity. Strong capability to prioritize competing deadlines. Adaptability to perform additional duties as business needs evolve. Role Classification and Working Conditions This is a salaried, exempt-level position. This position typically works in an office environment; and given the nature of our business is also exposed to operations/warehouses/production environments. Physical/Other Requirements Ability to lift and/or move up to 30 pounds. #J-18808-Ljbffr Confidential