Sr. Cybersecurity Integration Engineer; USI

Job Details:

Job Location:

Miramar, FL 33025, Position Type:
Full Time, Job Shift: 1st Shift, Job Category:
Non DOT - Safety Sensitive Position

VSE Aviation is building a dedicated IT Integration Team, and this role, the Senior Cybersecurity Integration Engineer, brings every acquired site up to VSE security standards, from post-closure activities through architecture buildout and handoff to steady-state operations. This is a senior individual contributor role, and the engineer is trusted to move without waiting for direction. Working alongside the IT Technology Services Integration Specialists, the engineer is the security lead for firewall and network architecture, identity and Zero Trust, endpoint, email protection, and SIEM onboarding.

The primary focus is network security: perimeter design, firewall buildout, and segmentation at sites VSE has just acquired and does not yet fully understand. This scope covers the full security scope at a newly acquired site. The engineer designs within VSE's standards and tooling, brings proposed changes back to the cybersecurity team, and partners with security operations through implementation so each site reaches steady-state monitoring without disrupting the business.

The position is field-based: travel to acquisitions at both domestic and international sites is required approximately 80% of the time, including overnight, weekend, and on-call coverage during go‑live and hyper care periods.

Responsibilities include, but are not limited to:

• Execute the day‑one security onboarding checklist for acquired site personnel and systems.
• Assess and document the acquired entity's existing security posture, including known vulnerabilities, unmanaged assets, privileged accounts, and control gaps; produce a written risk summary for IT and business leadership.
• Conduct initial network reconnaissance and perimeter review, including inbound exposure, remote access paths, and third‑party connections.
• Escalate to cybersecurity leadership on indicators of active or historical compromise, proposed risk acceptances, deviations from VSE security standards, and unplanned spending.

• Lead the physical and logical deployment of perimeter firewalls at integration sites.
• Configure firewall rule sets, site‑to‑site and remote‑access VPN, and inspection policy per VSE standards.
• Validate firewall posture through policy review, traffic analysis, and post‑deployment testing.
• Coordinate with the Infrastructure team on network segmentation design and firewall placement relative to LAN, wireless, and OT/warehouse systems.
• Decommission or isolate legacy perimeter devices and third‑party remote access after cutover.

• Implement Zero Trust Network Access controls, enforcing least privilege across user roles, systems, and applications.
• Configure Conditional Access policies, device compliance requirements, and application access controls in Microsoft Entra .
• Enforce User Assignment Required on all enterprise applications and remediate legacy authentication.
• Configure and validate MFA and identity protection for all user accounts, including service and privileged accounts.
• Validate Zero Trust posture through access review, policy testing, and monitoring dashboards.

• Work with the IT point of contact at the acquired company to deploy and configure endpoint detection and response (EDR) across all acquired‑site devices and servers; confirm full coverage against the asset inventory.
• Integrate the acquired site into VSE's SIEM platform, ensuring log source onboarding, ingestion health, and alerting coverage.
• Implement email security tooling aligned to VSE standards,…