Cyber Security Engineer II

Job Overview

Cybersecurity Engineer 2 is a hands-on technical role responsible for supporting secure infrastructure, systems, networking, and compliance requirements across regulated enterprise environments. Working alongside the Cybersecurity Lead, this role focuses on execution and operational support across regulated cloud and on-prem environments, including Office 365 GCC-H, Azure Government, AWS GovCloud, and on-prem infrastructure. The position plays a direct role in safeguarding sensitive data through secure system configuration, access control enforcement, monitoring, and alignment with regulatory and compliance frameworks such as CMMC and NIST 800-171.

Essential Functions

• Cybersecurity & Technical Support (Primary Focus)
  • Act as a technical cybersecurity and infrastructure POC for security and compliance-driven requirements.
  • Support requests related to system builds, secure configurations, networking, and access controls.
  • Work directly with engineering, IT, and business teams to implement compliant and secure technical solutions.
  • Translate security, infrastructure, and data protection requirements into actionable, auditable implementations.
• Systems, Infrastructure & Network Security
  • Administer and support Windows Server, Active Directory, and Linux systems, including baseline configuration and hardening.
  • Assist with secure Linux builds and ongoing system administration to support enterprise workloads.
  • Configure and troubleshoot networking components, including firewalls, VLANs, ACLs, and VPNs, to support segmented and secure environments.
  • Support secure connectivity across enterprise systems and supporting infrastructure.
• Cloud, Identity & Microsoft Security Stack
  • Support secure workloads and configurations within GCC High, Azure Government, and AWS GovCloud environments.
  • Implement and support security controls using Microsoft Purview, Microsoft Defender, and related Microsoft security tooling.
  • Assist with data classification, labeling, and access enforcement in regulated environments.
  • Support identity and access management using Entra ID (Azure AD), Conditional Access, and device compliance mechanisms.
• Endpoint, Network & Threat Protection
  • Support and maintain endpoint protection and detection using CrowdStrike.
  • Assist with secure remote access and traffic inspection using Zscaler.
  • Help investigate and remediate security events impacting enterprise systems.
  • Support vulnerability remediation and secure baseline enforcement across environments.
  • Apply strong technical expertise in routing, switching, and secure interconnectivity of systems and devices.
• Compliance & Regulatory Execution
  • Support the implementation and execution of CMMC Level 2, NIST 800-171, and DFARS aligned requirements across regulated environments.
  • Assist with technical control implementation related to access control, audit logging, system hardening, and sensitive data protection.
  • Support evidence collection, technical documentation, and audit readiness activities.
  • Work closely with cybersecurity leadership to ensure systems remain compliant and defensible during assessments.
• Automation & Scripting
  • Develop and maintain PowerShell, Python, or Bash scripts to support system configuration, automation, and reporting.
  • Assist with repeatable and auditable deployments for Windows, Linux, and cloud environments.
  • Improve operational consistency, security posture, and compliance through automation and documentation.
  • Perform other duties as required.

Standard Essential Functions

• Regular and reliable attendance on a full time basis [or in accordance with posted schedule].
• Responsible for exhibiting professional behavior with both internal and external business associates that reflects positively on the company and is consistent with the company's policies and practices.
• Embodies AEVEX’s cultural values and aligns daily actions with department goals and company culture.

Qualifications and Competencies

• Solid understanding of networking fundamentals, including firewalls, VLANs, routing, VPNs, and zero-trust access patterns.
• Working knowledge of CMMC and NIST 800-171, with practical experience protecting sensitive or regulated data.
• Proficiency with scripting and automation, with strong PowerShell skills required; Python and/or Bash preferred.

Education / Certifications