{"id":2938385,"url":"https://alion.io/job/vse-aviation-sr-cybersecurity-integration-engineer-usi9","title":"Sr. Cybersecurity Integration Engineer (USI9)","company":{"id":451615,"name":"VSE Aviation","domain":"vseaviation.com","url":"https://alion.io/company/vseaviation-2","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Paycom","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Miami, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":101000,"max_usd":194000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":1385},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CMMC","optional":false},{"name":"DLP","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"NIST CSF","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"VPN","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-10-20T16:38:37Z","employer_posted_date":"2026-10-20","last_verified_at":"2026-10-27T09:13:36Z","board_verified":true,"closed_at":null,"days_open":7,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":7},"description":"SUMMARY:\nVSE Aviation is building a dedicated IT Integration Team, and this role, the Senior Cybersecurity Integration Engineer, brings every acquired site up to VSE security standards, from post-closure activities through architecture buildout and handoff to steady-state operations. This is a senior individual contributor role, and the engineer is trusted to move without waiting for direction. Working alongside the IT Technology Services Integration Specialists, the engineer is the security lead for firewall and network architecture, identity and Zero Trust, endpoint, email protection, and SIEM onboarding. The primary focus is network security: perimeter design, firewall buildout, and segmentation at sites VSE has just acquired and does not yet fully understand. This scope covers the full security scope at a newly acquired site. The engineer designs within VSE's standards and tooling, brings proposed changes back to the cybersecurity team, and partners with security operations through implementation so each site reaches steady-state monitoring without disrupting the business. The position is field-based: travel to acquisitions at both domestic and international sites is required approximately 80% of the time, including overnight, weekend, and on-call coverage during go-live and hyper care periods.\nDUTIES & RESPONSIBILITIES:\nResponsibilities include, but are not limited to:\nAssessment and Containment\nExecute the day-one security onboarding checklist for acquired site personnel and systems.\nAssess and document the acquired entity's existing security posture, including known vulnerabilities, unmanaged assets, privileged accounts, and control gaps; produce a written risk summary for IT and business leadership.\nConduct initial network reconnaissance and perimeter review, including inbound exposure, remote access paths, and third-party connections.\nEscalate to cybersecurity leadership on indicators of active or historical compromise, proposed risk acceptances, deviations from VSE security standards, and unplanned spending.\nFirewall and Perimeter Buildout\nLead the physical and logical deployment of perimeter firewalls at integration sites.\nConfigure firewall rule sets, site-to-site and remote-access VPN, and inspection policy per VSE standards.\nValidate firewall posture through policy review, traffic analysis, and post-deployment testing.\nCoordinate with the Infrastructure team on network segmentation design and firewall placement relative to LAN, wireless, and OT/warehouse systems.\nDecommission or isolate legacy perimeter devices and third-party remote access after cutover.\nIdentity and Zero Trust\nImplement Zero Trust Network Access controls, enforcing least privilege across user roles, systems, and applications.\nConfigure Conditional Access policies, device compliance requirements, and application access controls in Microsoft Entra ID.\nEnforce User Assignment Required on all enterprise applications and remediate legacy authentication.\nConfigure and validate MFA and identity protection for all user accounts, including service and privileged accounts.\nValidate Zero Trust posture through access review, policy testing, and monitoring dashboards.\nSecurity Tooling and Telemetry\nWork with the IT point of contact at the acquired company to deploy and configure endpoint detection and response (EDR) across all acquired-site devices and servers; confirm full coverage against the asset inventory.\nIntegrate the acquired site into VSE's SIEM platform, ensuring log source onboarding, ingestion health, and alerting coverage.\nImplement email security tooling aligned to VSE standards, including anti-phishing, secure email gateway, and DLP policy.\nValidate that security telemetry is being monitored and that alerting is routed correctly before declaring the site integration complete.\nEquipment, Vendor, and Licensing Management\nCoordinate with vendors to order security hardware, including firewalls and endpoint sensors.\nManage vendor relationships for security tooling, including licensing, and support escalations.\nManage security application license allocations and ensure compliance with vendor agreements.\nTrack hardware delivery, inventory, and deployment readiness against the integration schedule.\nCloseout, Documentation, and Continuous Improvement\nMaintain per-site integration documentation: architecture diagrams, rule sets, exceptions, and residual risk.\nProduce a formal security handoff package transitioning the site to steady-state IT and security operations.\nTrack and drive closure of open security findings and accepted-risk items after cutover.\nSurface integration milestones, blockers, and cross-team dependencies in integration stand-ups and the shared IT Integration project workspace.\nServe as the cybersecurity contributor in PMO-led integration project closeouts, presenting security outcomes, residual risk, and unresolved findings for each completed site.\nMaintain and improve VSE's cybersecurity integration playbook and supporting documentation, translating lessons learned from each closeout into updated standards, checklists, and effort estimates that inform security requirements and risk assumptions on future integrations.\nOther duties as assigned.\nMINIMUM REQUIREMENTS:\nDemonstrated firsthand experience is the primary screening criterion for this role. Certifications are treated as supporting evidence and are not a substitute for a verifiable record of building and defending enterprise networks.\nBachelor’s degree in information technology, cybersecurity, or a related fieldOr an additional 3 years of specific work experience in lieu of degree.\n\n7 years of firsthand network security engineering in a multi-site enterprise environment, including at least three years at a senior or lead level.\nDemonstrated ability to own a security architecture end to end: assess, design, build, validate, document, while following defined standards, and hand off with no senior engineer above them.\nDeep, demonstrable enterprise firewall experience: physical deployment, rule set design and cleanup, NAT, site-to-site and remote-access VPN, and inspection policy on a major next-generation firewall (NGFW) platform. Candidates should be able to walk through firewall deployments they personally designed and built.\nProven network segmentation design experience, including the ability to segment a network the candidate did not build and does not have complete documentation for.\nStrong routing and switching fundamentals: VLANs, dynamic routing protocols, and ACLs.\nPractical experience migrating production firewalls and VPN appliances off legacy platforms without causing a business outage.\nDemonstrated ability to assess an unfamiliar environment and build a migration plan that brings it to standard, including compensating controls for business-critical systems that must remain in place and accessible to the business.\nWorking expertise in Microsoft 365 and Entra ID security, including Conditional Access, MFA, and identity protection.\nPractical experience deploying and operating an EDR platform at scale.\nTrack record of building to an established enterprise security standard and improving it within a team.\nComfortable operating independently in the field while staying closely connected to an in-house security team.\nWillingness and ability to travel up to 75% to acquisition sites, including occasional short-notice travel.\nPREFERRED REQUIREMENTS:\nPrior experience as technical lead on M&A technology integration, carve-outs, or divestitures.\nExperience presenting security risk findings to executives or acquiring company leadership.\nVendor firewall certification (Palo Alto, Fortinet, Cisco) or an industry certification such as CISSP or GIAC (GSEC, GCIH, GCIA).\nExperience in aviation, aerospace, defense, or another regulated manufacturing or MRO environment.\nFamiliarity with NIST CSF, NIST SP 800-171, or CMMC control expectations.\nExperience securing warehouses, shop floor, or OT-adjacent environments where downtime tolerance is low.\nScripting, automation, or AI-assisted tooling (PowerShell, Python) to speed up onboarding and validation at scale.\nOTHER:\nRemote-based role with sustained periods on-site at acquisition locations; travel may reach 75% during active integration cycles.\nOccasional after-hours and weekend work required to support cutover windows.\nMust be able to lift and rack network and security hardware (up to 40 lbs.) and work in data closets, MDF/IDF spaces, and warehouse environments.\nMust be able to meet any customer- or contract-driven background screening requirements.\nThe selected applicant will be subject to a background check and drug testing.","description_format":"text","description_chars":8675,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Aerospace Manufacturing","Maintenance, Repair & Operations (MRO)"],"lifecycle":[{"event":"open","at":"2026-10-20T16:38:37Z"}],"visa":[],"liveness":{"score":36,"band":"fade","label":"Fading","p_open":1,"p_active":0.753,"p_room":0.473,"age_days":6,"expected_fill_days":4,"reasons":["conf:1","win:tail"],"computed_at":"2026-10-27T05:46:45Z"},"pay":null,"html_url":"https://alion.io/job/vse-aviation-sr-cybersecurity-integration-engineer-usi9","json_url":"https://alion.io/job/vse-aviation-sr-cybersecurity-integration-engineer-usi9.json","meta":{"generated_at":"2026-10-27T18:37:43Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8811,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-28T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":451615},"rest":"https://alion.io/mcp/rest/get_company?id=451615"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fvse-aviation-sr-cybersecurity-integration-engineer-usi9"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fvse-aviation-sr-cybersecurity-integration-engineer-usi9"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fvse-aviation-sr-cybersecurity-integration-engineer-usi9"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/vse-aviation-sr-cybersecurity-integration-engineer-usi9\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fvse-aviation-sr-cybersecurity-integration-engineer-usi9"}]}