Principal Security Engineer

Our client is a global aviation organization seeking a Principal Security Engineer to lead the implementation and enhancement of cybersecurity controls across a complex, multi-site environment. This is an opportunity to work hands‑on across Azure, network, endpoint, identity, and cloud security while helping mature the organization’s technical security capabilities.

You’ll take ownership of technical security initiatives across the environment, implementing controls and delivering projects against an established technical roadmap. Working closely with IT, the MSP, vCISO, and Legal teams, you’ll strengthen security across cloud, infrastructure, identity, and endpoint environments.

• Drive the implementation and optimization of security controls across network, endpoint, identity, Azure, and cloud environments.
• Design and maintain firewalls, network segmentation, VPNs, IDS/IPS, EDR, and MFA controls.
• Manage and tune SIEM, EDR, and email security platforms, including detection rules, alerts, and dashboards.
• Lead incident response, vulnerability management, patch remediation, and technical security projects.

• 7+ years of hands‑on IT and cybersecurity experience, with experience leading a security program.
• Strong Azure security experience with solid enterprise networking fundamentals.
• Hands‑on experience with Microsoft Sentinel, Sentinel One, AD/Entra , firewalls, VPNs, IDS/IPS, and endpoint security.
• Strong Power Shell and/or Python scripting experience.
• Experience implementing controls aligned with NIST CSF, ISO 27001, CIS, and SOX/ITGC.
• Proven ability to personally deliver technical security projects in fast‑paced, regulated environments.