Cybersecurity Analyst/Engineer
- Compensation
- Not disclosed
- Location
- Houston, Texas, United States
- Work setup
- Hybrid
- Seniority
- Not specified
- Employment
- Contract
- Experience
- 5+ years
- Category
- Security
- Posted
Skills
Must have
- 3–5+ years of hands-on experience in cybersecurity or information security engineering; mid-to-senior level background required
- Demonstrated experience in a federal government contractor, defense, or similarly regulated environment strongly preferred
- Prior experience with CMMC framework requirements is required
- Hands-on proficiency with the Microsoft security stack: Sentinel (SIEM/SOAR), Defender for Endpoint, Defender for Cloud, Entra ID, and Conditional Access
- Working knowledge of Azure security services, cloud posture management (CSPM), and hybrid infrastructure environments
- Working knowledge of NIST CSF, ISO 27001, DFARS 252.204-7012, and CMMC 2.0 framework requirements
- Ability to maintain audit-ready documentation, evidence libraries, and control mapping artifacts
- Strong written and oral communication skills; ability to translate technical risk into business-level language for executive audiences
- Demonstrated experience identifying, investigating, and mitigating cyber-enabled fraud, including business email compromise (BEC), invoice fraud, and payment diversion schemes
Nice to have
- CISSP, CISM, CompTIA Security+, or Microsoft SC-200 / SC-300 certification (candidates with equivalent demonstrated experience will be considered)
- Experience with vulnerability scanning platforms (e.g., Nessus, Qualys, Defender Vulnerability Management) and endpoint management via Intune/MEM
- Familiarity with ERP security configurations or experience supporting an active ERP migration environment
- Experience in a maritime, transportation, or DoD-adjacent operating environment
- Certified Fraud Examiner (CFE) or equivalent fraud investigation/financial crimes credential
- Security clearance eligibility (Secret preferred)
Full description
Patriot Maritime are maritime government contracting companies providing management, crewing, and vessel support services to the U.S. government under contracts with MARAD and the Military Sealift Command (MSC). With approximately 83 shoreside employees and operations across multiple vessel programs — including the Ready Reserve Force (RRF), Watson-class vessels, Bob Hope vessels, and other federal maritime programs — Patriot operates at the intersection of commercial maritime expertise and federal government contracting. Headquartered in Houston, TX, our team supports the nation’s strategic sealift mission and military readiness.
Patriot is seeking an experienced Cybersecurity Analyst / Engineer to build, operate, and mature the organization's information security program. The complexity of Patriot’s environment — hybrid Azure/on-premises infrastructure, an active ERP migration, federal government contract obligations, and ISO 27001, NIST and CMMC compliance requirements — demands someone with demonstrable, hands-on experience who can operate independently, interface with executive leadership, and drive measurable improvement in the company’s security posture.
The ideal candidate is equally comfortable producing executive risk dashboards as they are configuring Conditional Access policies, tuning Sentinel detection rules, or leading an incident response tabletop. They bring a government contractor mindset: documentation-first, audit-ready, and compliance-aware.
KEY RESPONSIBILITIES
Security Operations & Monitoring
- Own and operate security monitoring using Microsoft Sentinel or equivalent SIEM; tune detection rules, triage alerts, and lead response to security events
- Manage Defender for Endpoint, Defender for Cloud, and Microsoft Secure Score — driving measurable posture improvements on a recurring basis
- Monitor identity security events, privileged access activity, and anomalous sign-in patterns via Microsoft Entra ID
Vulnerability Management & Remediation
- Conduct regular vulnerability scanning across endpoints, servers, and cloud resources; manage a remediation pipeline in coordination with IT and third-party vendors
- Track remediation status, exceptions, and risk acceptance decisions with documented evidence for compliance and audit purposes
Incident Response & Business Continuity
- Develop, maintain, and test Incident Response (IR) and Disaster Recovery (DR) plans; lead tabletop exercises with IT and operations stakeholders
- Serve as the primary point of contact for security incidents; coordinate containment, investigation, and post-incident remediation
Compliance & ISO 27001/NIST/CMMC Administration