Senior Security Engineer

Chromalloy is a global engineering & solutions company. We are a leading provider of aftermarket parts, repairs, and solutions that safely & reliably extend the life of aircraft engines and gas turbines. We develop, manufacture and repair critical turbine components for a range of engine platforms. Our solutions support the engines running the aerospace, energy and defense industries around the world.

Video
:
What We Do

Why work at Chromalloy?

Chromalloy employees are proud, passionate problem-solvers who strive to live our values every day. A career with Chromalloy is an opportunity to learn from top industry experts, work with important technologies, and unlock a passion for innovation. Join our team of experts, innovators and problem-solvers delivering world-class solutions for our customers. As a global company, we are committed to creating an inclusive environment where all employees feel represented, heard, and able to bring their best selves to work every day.

Be part of something bigger with Chromalloy!

Our Total Rewards Program is designed to support you today and in the future.

• Comprehensive and flexible benefit options starting on day one
  , including medical, dental, vision, EAP, wellness incentives, and 401(k) with employer matching.
• Development & progression opportunities for every employee - regular performance conversations, training and development curriculum, and engineering fellowship programs.
• Paid time off, including vacation, sick time, paid holidays, and parental leave-all eligible on your first day of employment
  !
• Competitive pay, including eligibility for quarterly and annual bonuses
  , depending on role and site.

Eligibility for individual benefit plans may vary based on employment status.

We are seeking a highly experienced Senior Security Engineer to lead and support advanced cybersecurity initiatives across our enterprise, with a strong emphasis on aerospace and defense manufacturing environments. This role requires deep technical expertise in data protection, operational technology (OT) governance, digital forensics, and secure infrastructure. The ideal candidate will have a proven track record in implementing NIST 800-171 controls and supporting compliance efforts in regulated industries.

Work schedule: Hybrid

• Serve as a technical lead and subject matter expert for cybersecurity projects and initiatives.
• Design, implement, and maintain security architectures that align with business and regulatory requirements.
• Collaborate with cross-functional teams including IT, engineering, legal, and compliance to ensure security is embedded across systems and processes.
• Conduct risk assessments and threat modeling to identify vulnerabilities and recommend mitigation strategies.
• Develop and maintain security plans, and procedures, support maintenance of policies and standards.
• Monitor and respond to security incidents, ensuring timely resolution and documentation.
• Mentor junior security analysts and leads and contribute to team development and knowledge sharing.
• Stay current with emerging threats, technologies, and industry best practices.
• Support audits, assessments, and reporting for internal and external stakeholders.
• Advocate for security awareness and training across the organization.

• DLP Strategy & Execution — Lead the evaluation, selection, and deployment of modern Data Loss Prevention (DLP) solutions to replace legacy systems, ensuring alignment with compliance and business needs.
• Operational Technology (OT) Governance — Develop and enforce security policies and controls for OT environments, including ICS/SCADA systems, with a focus on secure integration in aerospace and defense manufacturing settings.
• Digital Forensics & Investigations — Conduct forensic analysis of security incidents, support internal investigations, and maintain proper chain-of-custody and evidence handling procedures.
• Digital Signatures & Email Encryption — Design and manage enterprise-wide digital signature and secure email encryption solutions to protect sensitive communications and intellectual property.
• Systems Hardening & STIG Compliance — Lead efforts to harden systems across the…