Senior Security Engineer (m/f/d)

Responsibilities

We are representing a confidential aerospace organization in their search for a Senior Security Engineer. In this role, you will serve as the technical owner and operator of mission-critical security infrastructure, working hands-on to both build and continuously test the controls that protect production systems.

You will own and operate the enterprise SASE platform, managing Internet Security and Private Access policies. Working closely with the network team, you will drive network security engineering and segmentation strategy, analyze firewall rule sets, identify gaps, and coordinate remediation. You will manage DNS security, WAF solutions, and edge protection services, as well as coordinate IPS, AV, sandboxing, and DDoS protection controls.

A significant portion of your work will involve security posture and hardening initiatives. You will apply CIS Benchmarks across firewalls, endpoints, cloud identity platforms, and cloud productivity suites. You will lead the clean-up and hardening of both on-premises and cloud identity directories, drive phishing-resistant MFA and privileged access programs including just-in-time elevation, and own certificate lifecycle and PKI operations.

On the detection and visibility front, you will manage and tune IPS/IDS platforms, write custom IDS signatures, and operate network sensors. You will build and maintain detections in the SIEM using MITRE ATT&CK frameworks to support the SOC, extend visibility into OT environments with purpose-built monitoring tooling, and act as an L3 incident responder for escalated security events.

You will serve as the technical owner for endpoint detection and response, data protection, and CASB platforms. You will script and build internal tooling in PowerShell and Python to automate controls and checks. Additionally, you will design what you operate: run threat modeling and attack-path analysis, evaluate and select tooling, and embed security practices with IT, infrastructure, manufacturing, and mission teams across both IT and OT environments.

What We're Looking For

• 10+ years of security engineering experience with real ownership of production security tooling, not policy or advisory work
• Architect spirit: ability to design target states, document patterns, and then build them yourself
• Hands-on SASE experience: administering an enterprise SASE platform end to end
• Hardening expertise: applying CIS Benchmarks to firewalls, endpoints, cloud identity, and cloud productivity platforms in production; rolling out phishing-resistant MFA or privileged access management
• Networking and firewall fundamentals: sufficient to own segmentation strategy and drive rule set analysis; experience with CDN-based WAF and edge protection services
• Security stack depth: strong background across endpoint detection and response, data protection, SIEM and detection query languages, cloud identity and on-premises directory hardening, certificate lifecycle and PKI operations
• Detection engineering: practical MITRE ATT&CK-driven detection work and experience writing custom IDS/IPS signatures
• Operational depth: strong capability in detection, incident response, and vulnerability management
• Automation skills: scripting in PowerShell and Python, plus infrastructure-as-code and policy-as-code experience
• IT and OT experience: comfortable working across both environments; familiarity with OT protocols such as EtherNet/IP, OPC UA, and Modbus is a strong plus
• High autonomy: ability to operate as an internal expert with full ownership and guide others
• Mentoring capability: experience mentoring engineers and analysts and acting as technical lead in cross-functional projects
• Clear communication: able to translate technical risk for various audiences and work controls through other teams
• Education: Bachelor's or Master's degree in Computer Science, Information Security, or related field, or equivalent through relevant certifications and hands-on experience

Bonus qualifications: experience in aerospace, defense, energy, manufacturing, or other OT-heavy safety-critical environments; prior SOC or incident response team experience; cloud security depth in a major public cloud; familiarity with ISO 27001 and NIST; relevant certifications such as Security+, GCIA, OSCP, or equivalent.

How We Work With You

When you apply through Get A Job.ai, our talent team will review your profile and conduct an initial screening. If there is a strong match, we will submit your candidacy to our client for consideration. Throughout the process, we serve as your advocate and main point of contact. Please do not contact the client directly, as all communication is managed through our recruitment team to ensure a smooth and professional experience for all parties.

Pay

Compensation details will be discussed during the screening process based on your experience and qualifications.

Equal Opportunity: Get A Job.ai is committed to inclusive hiring practices. We welcome candidates of all backgrounds and work to ensure fair treatment throughout the recruitment process.