Principal Cybersecurity Engineer

As the Principal Cybersecurity Engineer, you will play a key role in designing, implementing, and enhancing security measures across enterprise infrastructure, cloud environments, and the software development lifecycle.

This position will focus on strengthening security operations through modern DevSecOps practices, including automated security testing, secure coding standards, and the integration of security controls into CI/CD pipelines.

You will collaborate closely with IT, engineering, and business stakeholders to identify vulnerabilities, mitigate risks, and implement scalable security solutions. This role combines hands-on technical expertise with strategic leadership, helping to strengthen the organization's overall security posture while supporting innovation, operational efficiency, and continuous improvement.

Responsibilities

Cybersecurity Strategy & Governance

• Develop and execute a cybersecurity strategy aligned with NIST, CIS, and ISO frameworks.
• Define and enforce enterprise-wide security policies, standards, and architecture.

Cloud & Infrastructure Security

• Maintain and secure on-premise infrastructure including servers, firewalls, switches, routers, backup systems, and storage appliances.
• Implement and enforce network segmentation, access controls, and perimeter security policies on-prem.
• Monitor and manage patching, configuration baselines, and physical server security for all on-premise systems.
• Collaborate with IT operations to ensure high availability, backup integrity, and disaster recovery readiness of on-premise infrastructure.
• Integrate on-prem security telemetry with cloud-native SIEM tools
• Ensure consistent security posture and policy enforcement across hybrid environments using Azure Arc and other hybrid tooling.
• Secure Microsoft Azure environments using Azure-native tools such as Microsoft Defender for Cloud, Azure Policy, Azure Security Center, and Azure Key Vault.
• Define Azure Entra IAM strategies, monitor configurations, and implement guardrails via policy-as-code (e.g., Bicep, Azure Blueprints).

Risk Management & Incident Response

• Conduct enterprise risk assessments and develop mitigation plans.
• Lead threat hunting, incident response, and root cause analysis efforts.

Threat Detection & Vulnerability Management

• Deploy and manage Endpoint and other tools for vulnerability scanning and log analysis.
• Conduct red/blue team exercises and coordinate remediation with IT operations and DevOps teams.

Compliance & Audit Readiness

• Ensure compliance with data protection and industry regulations (e.g., CCPA, GDPR, HIPAA) using Microsoft Compliance Manager.
• Maintain audit logs, control documentation, and readiness for third-party security assessments.

Security Awareness & Culture

• Lead employee security training programs, simulate phishing attacks, and drive secure behavior adoption.
• Foster a DevSecOps mindset across the engineering and product development lifecycle.

DevSecOps Integration

• Embed security practices into DevOps workflows, CI/CD pipelines, and infrastructure as code using Azure DevOps.
• Automate security checks using GitHub Advanced Security, and container scanning tools.
• Define secure development standards and review code, build, and deployment processes.
• Enable shift-left security by training developers and automating early-stage testing in Azure-based environments.

Preferred Qualifications

Education & Certifications

• Bachelor’s degree in Cybersecurity, Computer Science, or a related field.
• CISSP, CISM, CEH, or Microsoft Security certifications (e.g., SC-200, AZ-500, SC-100) are preferred.

Experience

• 10+ years in cybersecurity with recent hands-on experience in Azure security and DevSecOps practices.
• Proven experience integrating security into Azure DevOps or GitHub CI/CD pipelines.
• Familiarity with container and orchestration security (e.g., Docker, Kubernetes on AKS).

security technology:

• Arctic Wolf (SOC)
• Bitsight
• Cisco FTD
• Cisco ISE
• Cisco Umbrella
• KnowBe4
• Mimecast
• OneTrust
• Sophos
• Tenable Nessus

Technical & Leadership Skills

• Strong scripting and automation capabilities (e.g., PowerShell, Python).
• Experience with Microsoft security and compliance platforms (e.g., Defender suite, Purview, Azure AD).
• Strong communication and collaboration skills with both technical and executive audiences.
• Ability to work cross-functionally and influence secure design decisions throughout the software lifecycle.