Senior Cybersecurity Integration Engineer

VSE Aviation

. Execute day-one security onboarding for acquired-site personnel and systems .

Posted 10/20/2026full-timeMiramar • Florida • United StatesSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in network security engineering, including firewall deployment, VPN configuration, and security architecture ownership. Proficient in Microsoft 365 security, EDR deployment, and risk assessment within multi-site enterprise environments.

Highest-signal resume keywords

Network Security EngineeringFirewall DeploymentMicrosoft 365 SecurityEnd-To-End Security ArchitectureEDR Deployment

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Firewall Rule Set DesignSite-To-Site VPNRemote-Access VPNNetwork Segmentation DesignRouting and Switching FundamentalsConditional AccessMulti-Factor AuthenticationIdentity ProtectionTraffic AnalysisRisk Assessment

Soft Skills

Independent OperationCommunication with LeadershipProblem-SolvingCollaboration with TeamsPresentation Skills

Tools & Technologies

Microsoft Entra IDSIEM PlatformEDR PlatformNGFW PlatformEmail Security Tools

Certifications & Qualifications

CISSPGIACVendor Firewall Certification

Industry Keywords

CybersecurityAerospaceDefenseRegulated ManufacturingNIST CSFNIST SP 800-171CMMCM&A Technology IntegrationOperational TechnologyWarehouse Security

Tech Stack

Tools & technologies

Cyber SecurityFirewallsPythonSwitching

About the role

Key responsibilities & impact

Execute day-one security onboarding for acquired-site personnel and systems
Assess and document existing security posture, vulnerabilities, unmanaged assets, privileged accounts, and control gaps
Produce written risk summaries for IT and business leadership
Conduct network reconnaissance and perimeter reviews
Escalate compromise indicators, risk acceptances, standards deviations, and unplanned spending
Lead physical and logical perimeter firewall deployment
Configure firewall rules, site-to-site and remote-access VPNs, and inspection policies
Validate firewall posture through policy review, traffic analysis, and testing
Coordinate network segmentation design and firewall placement with Infrastructure
Decommission or isolate legacy perimeter devices and third-party remote access
Implement Zero Trust Network Access and least-privilege controls
Configure Conditional Access, device compliance, and application access controls in Microsoft Entra ID
Enforce required user assignment and remediate legacy authentication
Configure and validate MFA and identity protection
Deploy and configure EDR across acquired-site devices and servers
Integrate acquired sites into VSE’s SIEM platform and ensure logging and alerting coverage
Implement email security, anti-phishing, secure email gateway, and DLP policies
Coordinate security hardware orders, vendors, licensing, inventory, and deployment readiness
Maintain integration documentation, architecture diagrams, rule sets, exceptions, and residual risk
Produce formal security handoff packages for steady-state IT and security operations
Drive closure of security findings and accepted-risk items
Report milestones, blockers, and dependencies in integration stand-ups and project workspaces
Present security outcomes, residual risk, and unresolved findings during project closeouts
Improve the cybersecurity integration playbook, standards, checklists, and effort estimates
Travel extensively to acquisition sites and support go-live and hyper-care periods

Requirements

What you’ll need

Bachelor’s degree in information technology, cybersecurity, or a related field, or an additional 3 years of specific work experience in lieu of degree
7 years of firsthand network security engineering in a multi-site enterprise environment
At least 3 years at a senior or lead level
End-to-end security architecture ownership: assess, design, build, validate, document, and hand off
Deep enterprise firewall experience, including physical deployment, rule set design and cleanup, NAT, site-to-site and remote-access VPN, and inspection policy on a major NGFW platform
Network segmentation design experience, including segmenting undocumented networks
Strong routing and switching fundamentals: VLANs, dynamic routing protocols, and ACLs
Experience migrating production firewalls and VPN appliances from legacy platforms without business outages
Ability to assess unfamiliar environments and create migration plans with compensating controls
Working expertise in Microsoft 365 and Entra ID security, including Conditional Access, MFA, and identity protection
Practical experience deploying and operating an EDR platform at scale
Experience building to established enterprise security standards and improving them within a team
Ability to operate independently in the field while staying connected to an in-house security team
Willingness and ability to travel up to 75% to acquisition sites, including occasional short-notice travel
Must be able to lift and rack network and security hardware up to 40 lbs.
Must be able to work in data closets, MDF/IDF spaces, and warehouse environments
Must meet customer- or contract-driven background screening requirements
Subject to background check and drug testing
Preferred: technical lead experience on M&A technology integration, carve-outs, or divestitures
Preferred: experience presenting security risk findings to executives or acquiring company leadership
Preferred: vendor firewall certification or CISSP/GIAC certification
Preferred: aviation, aerospace, defense, regulated manufacturing, or MRO experience
Preferred: familiarity with NIST CSF, NIST SP 800-171, or CMMC
Preferred: experience securing warehouses, shop floors, or OT-adjacent environments
Preferred: PowerShell, Python, scripting, automation, or AI-assisted tooling experience

Benefits

Comp & perks

Full-time employment
First-shift schedule
Remote-based role with sustained periods on-site at acquisition locations
Travel to domestic and international acquisition sites
Occasional after-hours and weekend work supporting cutover windows