Job Summary:

Experienced Cybersecurity Lead to protect our multi-site infrastructure and drive key cybersecurity initiatives. This is a hands-on, hybrid role that balances technical execution with security governance and compliance. Reports directly to the IT Director to ensure our systems remain secure, resilient, and compliant

Key Responsibilities

Monitor and secure network, server, and cloud infrastructure (Microsoft 365, Azure, AWS)

Lead enterprise cybersecurity initiatives, strategy deployment, and security-related projects (e.g., endpoint protection, MFA, vulnerability mitigation, secure configurations)

Lead cybersecurity response, triage, root cause analysis, and post-incident coordination during major incidents

Coordinate third-party penetration testing, vulnerability tracking, and vendor risk assessments

Serve as a primary security advisor to business leaders, help prioritize security initiatives based on business risk, and support cyber insurance questionnaires

Conduct internal audits and implement security controls across cloud and on-prem environments

Maintain and optimize endpoint security tools EDR/MDR

Support phishing detection, remediation, and user awareness initiatives

Maintain, optimize, and enforce Cybersecurity documentation, procedures, and policies

Collaborate with IT Director on future roadmap items, including SIEM implementation and security compliance frameworks

Stay current on emerging threats and recommend proactive measures.

Requirements

5+ years of hands-on experience in Cybersecurity roles

Strong knowledge of: Firewalls, VPNs, and Microsoft 365 security controls

Solid experience with Windows Server, Azure, and AWS environments

Proven experience in managing security incidents and implementing technical controls

Solid understanding of access control, encryption, patch management, and system hardening

Familiarity with industry-standard cybersecurity frameworks (e.g., NIST, CIS Controls, ISO 27001) and applicable aviation security guidance (TSA/FAA directives)

Excellent analytical, problem-solving, and decision-making skills

Strong written and verbal communication skills to interact effectively with department leaders

Preferred Qualifications

Certifications such as Security+, MS-500, Cisco Security, CISSP, or similar are a plus

Experience working in multi-site environment

Familiarity with EDR platforms, phishing response, and cloud identity protection