Sr. Cybersecurity Integration Engineer (USI9) (2697)
Field-based senior security engineer at an aviation parts/MRO company who travels ~75-80% to newly acquired sites to bring them up to VSE security standards: assesses security posture, leads perimeter firewall and network segmentation buildouts, deploys Zero Trust identity controls, EDR, email security, and SIEM onboarding, then hands off to steady-state operations.
- Compensation
- Not disclosed
- Location
- Miramar, FL 33025
- Work setup
- Not specified
- Seniority
- Senior
- Employment
- Contract
- Experience
- 3+ years
- Category
- Security
- Posted
Skills
Must have
- Bachelor's degree in IT, cybersecurity, or related field (or 3 additional years of relevant experience in lieu of degree)
- 7 years of network security engineering in a multi-site enterprise environment, including at least 3 years at senior/lead level
- Ability to own a security architecture end to end: assess, design, build, validate, document, and hand off
- Deep enterprise firewall experience: physical deployment, rule set design/cleanup, NAT, site-to-site and remote-access VPN, inspection policy on a major NGFW platform
- Proven network segmentation design experience, including networks without complete documentation
- Strong routing and switching fundamentals: VLANs, dynamic routing protocols, ACLs
- Experience migrating production firewalls and VPN appliances off legacy platforms without business outage
- Ability to assess unfamiliar environments and build a migration plan with compensating controls
- Working expertise in Microsoft 365 and Entra ID security: Conditional Access, MFA, identity protection
- Experience deploying and operating an EDR platform at scale
- Track record building to an established enterprise security standard
- Comfortable operating independently in the field while staying connected to an in-house security team
- Willingness and ability to travel up to 75% to acquisition sites, including short-notice travel
- Able to lift and rack network/security hardware up to 40 lbs and work in data closets and warehouse environments
Nice to have
- Prior experience as technical lead on M&A technology integration, carve-outs, or divestitures
- Experience presenting security risk findings to executives or acquiring company leadership
- Vendor firewall certification (Palo Alto, Fortinet, Cisco) or industry certification such as CISSP or GIAC (GSEC, GCIH, GCIA)
- Experience in aviation, aerospace, defense, or another regulated manufacturing or MRO environment
- Familiarity with NIST CSF, NIST SP 800-171, or CMMC control expectations
- Experience securing warehouses, shop floor, or OT-adjacent environments
- Scripting/automation experience (PowerShell, Python)
Full description
SUMMARY:
VSE Aviation is building a dedicated IT Integration Team, and this role, the Senior Cybersecurity Integration Engineer, brings every acquired site up to VSE security standards, from post-closure activities through architecture buildout and handoff to steady-state operations. This is a senior individual contributor role, and the engineer is trusted to move without waiting for direction. Working alongside the IT Technology Services Integration Specialists, the engineer is the security lead for firewall and network architecture, identity and Zero Trust, endpoint, email protection, and SIEM onboarding. The primary focus is network security: perimeter design, firewall buildout, and segmentation at sites VSE has just acquired and does not yet fully understand. This scope covers the full security scope at a newly acquired site. The engineer designs within VSE's standards and tooling, brings proposed changes back to the cybersecurity team, and partners with security operations through implementation so each site reaches steady-state monitoring without disrupting the business. The position is field-based: travel to acquisitions at both domestic and international sites is required approximately 80% of the time, including overnight, weekend, and on-call coverage during go-live and hyper care periods.
DUTIES & RESPONSIBILITIES:
Responsibilities include, but are not limited to:
Assessment and Containment
- Execute the day-one security onboarding checklist for acquired site personnel and systems.
- Assess and document the acquired entity's existing security posture, including known vulnerabilities, unmanaged assets, privileged accounts, and control gaps; produce a written risk summary for IT and business leadership.
- Conduct initial network reconnaissance and perimeter review, including inbound exposure, remote access paths, and third-party connections.
- Escalate to cybersecurity leadership on indicators of active or historical compromise, proposed risk acceptances, deviations from VSE security standards, and unplanned spending.
Firewall and Perimeter Buildout
- Lead the physical and logical deployment of perimeter firewalls at integration sites.
- Configure firewall rule sets, site-to-site and remote-access VPN, and inspection policy per VSE standards.
- Validate firewall posture through policy review, traffic analysis, and post-deployment testing.
- Coordinate with the Infrastructure team on network segmentation design and firewall placement relative to LAN, wireless, and OT/warehouse systems.
- Decommission or isolate legacy perimeter devices and third-party remote access after cutover.