Cyber Security Engineer

Company Overview

Global Ordnance is a premier defense solutions provider delivering mission-ready products and logistics support to the US Military and partner nations worldwide. With deep expertise in international procurement, compliance, and end-to-end supply chain management, Global Ordnance specializes in sourcing and delivering high-quality defense systems, munitions, and specialized equipment with speed, precision, and integrity. Our highly talented, agile and hardworking team understands the complexities of US and allied defense contracting, helping GO grow to one of the regions largest defense contractors and one of Tampa Bay’s fastest growing companies year over year.

As we continue our growth we are seeking professionals to join our team, we offer highly competitive total compensation packages including company paid (100%) medical and dental insurance for our employees as well as their families, competitive salaries, bonus programs, retirement plans and much more.

This critical position is for a highly skilled and experienced Cybersecurity Engineer who will play a key role in protecting the organization's sensitive data and systems. The ideal candidate is a proactive and detail-oriented professional with a deep understanding of cybersecurity best practices, compliance frameworks, and cutting-edge security technologies. This role requires a broad range of technical skills, including expertise in data loss prevention (DLP), SharePoint administration across multiple tenants in compliance with all regulations, cloud security (specifically within Microsoft 365 environments, including GCC High), data tagging and migration, and vulnerability management.

This individual will be responsible for working with a team implementing and maintaining robust security controls, responding to security incidents, and ensuring the organization's compliance with relevant regulations and industry standards. The Cybersecurity Engineer will be a key contributor to strengthening our security posture, minimizing risks, and fostering a culture of security awareness. This position requires the ability to work independently, as well as collaboratively within a team, and to effectively communicate technical concepts to both technical and non-technical stakeholders.

The successful candidate will thrive in a fast-paced environment and be comfortable managing multiple priorities while maintaining a high level of accuracy and attention to detail. This role offers the opportunity to make a significant impact on the organization's security posture and contribute to a growing and dynamic team.

• Develop, implement, and maintain cybersecurity policies, procedures, and standards in accordance with industry best practices and regulatory requirements (e.g., NIST 800-171 Rev 3, ISO 27001, GDPR, UK Cyber Essentials, etc.). Ensure compliance with relevant regulations and frameworks.
• Conduct regular reviews and updates of security policies.

• Design, implement, and manage DLP solutions to protect sensitive data.
• Monitor DLP alerts and investigate potential data breaches.
• Fine-tune DLP policies to minimize false positives and maximize effectiveness.

• Administer and maintain SharePoint environments across three tenants, managing user access, permissions, and security settings.
• Implement and enforce security policies within SharePoint.
• Troubleshoot SharePoint related security issues.

• Assist in the planning, implementation, and configuration of a new GCC High tenant, ensuring security best practices are followed during the migration process.
• Collaborate with other teams to integrate GCC High with existing systems.

• Implement data tagging strategies to classify and categorize sensitive information in alignment with both best practices and compliance programs. Plan and execute data migration projects, ensuring data integrity and security.
• Automate data tagging and migration processes where possible.
• Automate process and workflows for secure sharing with only vetted and approved users.

• Monitor security alerts and vulnerability scans. Analyze vulnerability reports and prioritize remediation efforts.
• Implement timely patches and fixes to address identified weaknesses. Track and report on vulnerability remediation progress.
• Respond to security incidents and breaches.

• Contribute to the development and delivery of security awareness training programs.
• Educate employees on best practices for cybersecurity.

• Collaborate with other IT teams and business units to ensure security is integrated into all aspects of the organization. Communicate effectively with technical and non-technical stakeholders.
• Provide regular updates on security status and initiatives.
• Perform other work as…