Cybersecurity Analyst​/Engineer

Patriot Maritime are maritime government contracting companies providing management, crewing, and vessel support services to the U.S. government under contracts with MARAD and the Military Sealift Command (MSC). With approximately 83 shoreside employees and operations across multiple vessel programs — including the Ready Reserve Force (RRF), Watson-class vessels, Bob Hope vessels, and other federal maritime programs — Patriot operates at the intersection of commercial maritime expertise and federal government contracting.

Headquartered in Houston, TX, our team supports the nation’s strategic sealift mission and military readiness.

Patriot is seeking an experienced Cybersecurity Analyst / Engineer to build, operate, and mature the organization's information security program. The complexity of Patriot’s environment — hybrid Azure/on-premises infrastructure, an active ERP migration, federal government contract obligations, and ISO 27001, NIST and CMMC compliance requirements — demands someone with demonstrable, hands-on experience who can operate independently, interface with executive leadership, and drive measurable improvement in the company’s security posture.

The ideal candidate is equally comfortable producing executive risk dashboards as they are configuring Conditional Access policies, tuning Sentinel detection rules, or leading an incident response tabletop. They bring a government contractor mindset: documentation-first, audit-ready, and compliance-aware.

• Own and operate security monitoring using Microsoft Sentinel or equivalent SIEM; tune detection rules, triage alerts, and lead response to security events
• Manage Defender for Endpoint, Defender for Cloud, and Microsoft Secure Score — driving measurable posture improvements on a recurring basis
• Monitor identity security events, privileged access activity, and anomalous sign-in patterns via Microsoft Entra

• Conduct regular vulnerability scanning across endpoints, servers, and cloud resources; manage a remediation pipeline in coordination with IT and third-party vendors
• Track remediation status, exceptions, and risk acceptance decisions with documented evidence for compliance and audit purposes

• Develop, maintain, and test Incident Response (IR) and Disaster Recovery (DR) plans; lead tabletop exercises with IT and operations stakeholders
• Serve as the primary point of contact for security incidents; coordinate containment, investigation, and post-incident remediation

• Administer and mature the ISO 27001 control environment; maintain a current Statement of Applicability, evidence library, and audit trail
• Support DFARS/CMMC readiness efforts as contract requirements evolve, coordinating with Legal and external advisors as needed
• Enforce and document adherence to NIST CSF and relevant federal compliance frameworks across PCS and ASM environments

• Review and enforce Conditional Access policies, MFA enrollment, and privileged access controls; ensure Entra  align with least-privilege principles
• Oversee endpoint compliance posture (Intune/MEM) and enforce security baselines across Windows endpoints

• Conduct third-party and vendor security risk assessments; maintain a vendor risk register and drive remediation of identified gaps
• Develop and deliver security awareness training and phishing simulation programs for all shore-based personnel
• Design and deliver targeted anti-fraud training for Finance, Accounting, and HR staff covering business email compromise (BEC), invoice fraud, payroll diversion, and vendor…