> Markdown version of [/jobs/ext/2608831-cybersecurity-engineer](https://www.wearedevelopers.com/jobs/ext/2608831-cybersecurity-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cybersecurity Engineer - **Company:** Amro Fabricating Corporation - **Location:** Huntington Beach, CA, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Microsoft Access, Microsoft Windows, Active Directory, Artificial Intelligence, Microsoft Azure, Microsoft Online Services, Business Software, Business Systems, Software as a Service, Cloud Computing, Cloud Computing Security, Cyber Security, Multi-Factor Authentication, Identity and Access Management, Internet Security, Intrusion Detection and Prevention, Virtual Private Networks (VPN), Information Systems Security Architecture Professional, Network Security, Microsoft Security Essentials, Network Segmentation, Role-Based Access Control, Azure Active Directory, Zero Trust Network Access, Security Information and Event Management, Single Sign-On, Software Vulnerability Management, Data Logging, Cloud Platform System, IT General Controls (ITGC), Software Troubleshooting, Firewalls (Computer Science), Microsoft InTune, Information Technology, Data Management, Network Server, Qualys - **Published:** August 24, 2026 - **Apply:** https://www.dice.com/job-detail/0c9bd310-b91f-48d9-987c-bb71f8385906 ## About the Role * Bachelor's degree in cybersecurity, information technology, computer science, engineering, or a related field; equivalent relevant experience may be considered. * 7+ years of progressive experience in cybersecurity engineering, identity and access management, vulnerability management, endpoint security, infrastructure security, or related roles. * Hands-on experience with Active Directory, Microsoft Entra ID, Microsoft 365, MFA, conditional access, single sign-on (SSO), privileged access, identity lifecycle processes, and non-human identities. * Experience operating enterprise vulnerability-management tools, establishing scan coverage, prioritizing risk, coordinating remediation, and validating closure. * Experience with endpoint protection, hardening, patching, device compliance, security monitoring, and the Microsoft security ecosystem. * Working knowledge of Windows endpoint and server security, cloud and network security, segmentation, secure configuration, logging, and incident response. * Experience producing technical control evidence and supporting audits, assessments, or regulated control environments. * Strong troubleshooting, documentation, communication, and cross-functional coordination skills in a fast-paced, multi-site environment., * Experience in aerospace, defense, manufacturing, engineering, or another highly regulated environment. * Direct experience with CMMC Level 2, NIST SP 800-171, DFARS, CUI, SOX IT GCC High, or export-controlled environments. * Experience with Microsoft 365 GCC High and tools such as Defender, Intune, Entra ID, Purview, Sentinel, Tenable, Qualys, Rapid7, or Defender Vulnerability Management. * Experience with privileged access management, password vaulting, security information and event management (SIEM), endpoint detection and response (EDR), email security, and security orchestration. * Experience with mergers and acquisitions (M\&A), site onboarding, identity consolidation, endpoint standardization, and post-acquisition remediation. * Familiarity with firewalls, virtual private networks (VPN), network segmentation, Zero Trust, Center for Internet Security (CIS) benchmarks, specialized assets, and compensating-control design. * Security+, Cybersecurity Analyst (CySA+), Systems Security Certified Practitioner (SSCP), Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), GIAC Security Essentials Certification (GSEC), GIAC Certified Incident Handler (GCIH), Microsoft Security, Azure Security Engineer, or comparable certification. This position requires U.S. person status under U.S. export control laws, including U.S. citizens and nationals, lawful permanent residents, refugees, and asylees. ## Description Karman Space & Defense is a leader in the rapid design, development, and production of critical, next-generation system solutions that align with the U.S. Department of War and its allies' core mission priorities, and meet the accelerating demand for access to space. Building on nearly 50 years of success, we deliver Payload & Protection Systems, Aero/Hydrodynamic Interstage Systems, and Propulsion & Launch Systems to more than 80 prime contractors supporting over 130 space and defense programs. This role strengthens identity security, privileged access, vulnerability management, and technical remediation across Karman's multi-site environment. You will engineer and continuously improve security controls across Microsoft platforms, endpoints, servers, cloud environments, site technologies, and specialized assets. Working closely with Infrastructure, Business Systems, site teams, and service providers, you will ensure clear ownership, reliable evidence, and sustainable remediation that supports regulated aerospace and defense requirements., * Engineers and improves identity security across Active Directory, Microsoft Entra ID, Microsoft 365 GCC High, cloud platforms, business applications, and related services. * Strengthens identity lifecycle processes, access provisioning, privileged access, multifactor authentication (MFA), conditional access, role-based access control, and non-human identity protections. * Operates and matures enterprise vulnerability management, ensuring authenticated scanning, asset coverage, data quality, prioritization, remediation coordination, and validated closure. * Partners with Infrastructure to enhance endpoint, server, and cloud security through patching, encryption, device management, configuration baselines, detection capabilities, and Microsoft security tools. * Reviews new Microsoft 365, Software-as-a-Service (SaaS), cloud, and AI-enabled capabilities for identity, access, logging, and data-handling requirements. * Administers assigned security tools and investigates identity, endpoint, email-security, vulnerability, and logging alerts; supports containment, evidence preservation, and post-incident hardening. * Implements, validates, and documents technical controls supporting CMMC Level 2, NIST SP 800-171, DFARS, Controlled Unclassified Information (CUI), and Sarbanes-Oxley (SOX) Information Technology General Controls (ITGC). * Supports technical remediation of assessment findings, audit gaps, Plans of Action and Milestones (POA\&Ms), and control failures and participates in walkthroughs, reviews, and assessments. * Reviews technology projects, integrations, deployments, SaaS services, vendor solutions, and M\&A activities for identity, vulnerability, endpoint, and data-exposure risks. * Maintains technical procedures, configurations, remediation guides, metrics, and automation opportunities and mentors IT and security teams to strengthen operating capability. ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Kubernetes Security - Challenge and Opportunity](https://www.wearedevelopers.com/videos/412-kubernetes-security-challenge-and-opportunity) - [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [tRPC: API schemas are pure overhead](https://www.wearedevelopers.com/videos/796-trpc-api-schemas-are-pure-overhead) - [Build Delightful Mobile Experiences with Kotlin, Realm, and Atlas Device Sync](https://www.wearedevelopers.com/videos/694-build-delightful-mobile-experiences-with-kotlin-realm-and-atlas-device-sync) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)