IT Security Lead

In this role, you will help build, operate, and continuously strengthen our internal security program. Your responsibilities will span security operations, identity and access management, endpoint and network defense, vulnerability management, vendor risk, compliance, incident response, business continuity, and helping employees work securely. This role is intended for a professional with broad information technology and security experience who can operate independently, coordinate across teams, and grow into a senior internal security role.

-Own day-to-day cybersecurity operations across the organization. -Monitor and respond to SIEM/EDR alerts, threats, and security incidents. -Manage Active Directory, Microsoft Entra ID, SSO, MFA, privileged access, and access reviews. -Manage endpoint security, patching, encryption, configurations, and vulnerability remediation. -Support firewalls, VPNs, network segmentation, wireless security, and network monitoring. -Run vulnerability scans and work with IT/system owners to remediate findings. -Support incident response, disaster recovery, ransomware recovery, and business continuity. -Help maintain compliance with CMMC, DFARS, ITAR/export controls, NIST, and ISO 27001. -Protect CUI and FCI environments and maintain documentation/audit evidence. -Support customer/security audits and third-party/vendor security reviews. -Manage security awareness training and phishing simulations. -Help evaluate and implement new security technologies and processes.

3+ years of hands-on IT security / cybersecurity experience across multiple security areas.

-Strong experience with SIEM, EDR, vulnerability management, endpoint security, and incident response.

-Strong Microsoft environment experience: Windows, Active Directory, Microsoft 365, Entra ID, MFA/SSO.

-Strong networking/security fundamentals including firewalls, VPNs, segmentation, authentication, and secure configurations.

-Practical experience with CMMC and CUI/FCI, ideally along with DFARS, NIST, or ITAR/export-controlled environments. -Aerospace, defense, government contracting, or regulated manufacturing background.

-CrowdStrike Falcon, Tanium, ThreatLocker, or similar tools. Microsoft GCC High experience.

-CISSP, CISM, CISA, CRISC, Security+, CCNP Security, or similar certification.

-Experience supporting CMMC/customer/security audits.

-Penetration testing or offensive security knowledge.

-Experience developing/testing incident response and disaster recovery plans.