Senior Cybersecurity Engineer

SciTec, a wholly owned subsidiary of Firefly Aerospace, is a dynamic non-traditional defense contractor that delivers advanced technologies in support of U.S. National Security and Defense. For the past forty-five plus years, we have supported Department of Defense customers by developing innovative remote sensing algorithms, tools, and techniques to deliver world-class data exploitation capabilities supporting missile defense; intelligence, surveillance, & reconnaissance; space domain awareness; and aircraft survivability missions.

• →Serve as the CrowdStrike technical lead, leading implementation and integration across virtual, physical, and cloud environments. (AWS/Azure)
• →Harden and secure mission infrastructure assets, including servers, network devices, storage systems, and supporting platforms
• →Provide expertise to the vulnerability management process, including but not limited to risk prioritization based on environment and remediation actions. (Tools include Tenable, NinjaOne)
• →Collaborate with Infrastructure teams to provide cybersecurity input to system architecture, enclave segmentation, and infrastructure design decisions
• →Serves as technical lead for CMMC/NIST 800-171 requirements
• →Create and maintain SIEM queries in response to emerging threats around environment.
• →Develop and maintain CrowdStrike NG-SIEM log parsing
• →Ensure logging, monitoring, and access controls meet security and compliance requirements
• →Identify and mitigate operational cybersecurity risks across the asset lifecycle
• →Support incident response preparation and forensic readiness efforts
• →Communicate cybersecurity posture, risks, and remediation plans to technical and program leadership
• →Other duties as assigned

• Bachelor’s degree in Cybersecurity, Computer Science, Engineering, or related field
• CompTIA Cybersecurity Analyst (CySa+) or similar certification
• 6+ years of professional experience in cybersecurity engineering
• 2+ years of experience using CrowdStrike EDR and NG-SIEM
• Professional technical experience with NIST 800-171 / CMMC controls
• Experience conducting vulnerability scanning and remediation
• Strong understanding of Linux systems security
• Strong understanding of Windows systems security
• Strong understanding of Active Directory and IAM Security Best Practices
• Experience with scripting languages, such as Python, PowerShell or Bash
• Familiarity with network security concepts and segmentation
• Ability to obtain and maintain a DoD security clearance
• Strong documentation and communication skills
• Proven oral and written communication skills
• Strong attention to detail

Candidates who have any of the following skills will be preferred:

• Professional experience in Cloud Security (AWS / Azure)
• Experience integrating security into DevSecOps pipelines
• GIAC Certified Incident Handler (GCIH) certification
• CrowdStrike Certified Falcon Administrator (CCFA) certification