Cybersecurity Analyst – Engineer

Patriot Services

Cybersecurity Analyst/Engineer for Patriot's information security program in a hybrid IT environment. Overseeing security operations, incident response, compliance, and cyber fraud monitoring in a federal contracting context.

Posted 7/8/2026full-timeHouston • Texas • 🇺🇸 United StatesMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cybersecurity management, including incident response, vulnerability scanning, and compliance with ISO 27001 and CMMC frameworks. Proficient in utilizing Microsoft security tools to enhance security posture and mitigate risks in regulated environments.

Highest-signal resume keywords

Microsoft Sentinel (SIEM/SOAR)Defender for EndpointCMMC Framework RequirementsISO 27001 Control EnvironmentNIST CSF

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

CybersecurityInformation Security EngineeringVulnerability ScanningIncident Response (IR)Disaster Recovery (DR)Audit-Ready DocumentationControl MappingCyber-Enabled Fraud MitigationCloud Posture Management (CSPM)Hybrid Infrastructure Security

Soft Skills

Strong Written CommunicationStrong Oral Communication

Tools & Technologies

Microsoft Defender for CloudEntra IDConditional AccessSecurity DashboardsRisk Metrics

Industry Keywords

Federal Government ContractorDefenseRegulated EnvironmentDFARS 252.204-7012Business Email Compromise (BEC)

Tech Stack

Tools & technologies

AzureCloudCyber Security

About the role

Key responsibilities & impact

Own and operate security monitoring using Microsoft Sentinel or equivalent SIEM; tune detection rules, triage alerts, and lead response to security events
Manage Defender for Endpoint, Defender for Cloud, and Microsoft Secure Score — driving measurable posture improvements on a recurring basis
Conduct regular vulnerability scanning across endpoints, servers, and cloud resources; manage a remediation pipeline in coordination with IT and third-party vendors
Develop, maintain, and test Incident Response (IR) and Disaster Recovery (DR) plans; lead tabletop exercises with IT and operations stakeholders
Administer and mature the ISO 27001 control environment; maintain a current Statement of Applicability, evidence library, and audit trail
Review and enforce Conditional Access policies, MFA enrollment, and privileged access controls; ensure Entra ID configurations align with least-privilege principles
Conduct third-party and vendor security risk assessments; maintain a vendor risk register and drive remediation of identified gaps
Monitor email, financial, and payroll systems for indicators of business email compromise, invoice manipulation, wire fraud, and vendor/banking-detail change schemes
Produce recurring executive security dashboards and risk metrics for President, CFO, and senior leadership review

Requirements

What you’ll need

3–5+ years of hands-on experience in cybersecurity or information security engineering; mid-to-senior level background required
Demonstrated experience in a federal government contractor, defense, or similarly regulated environment strongly preferred
Prior experience with CMMC framework requirements is required
Hands-on proficiency with the Microsoft security stack: Sentinel (SIEM/SOAR), Defender for Endpoint, Defender for Cloud, Entra ID, and Conditional Access
Working knowledge of Azure security services, cloud posture management (CSPM), and hybrid infrastructure environments
Working knowledge of NIST CSF, ISO 27001, DFARS 252.204-7012, and CMMC 2.0 framework requirements
Ability to maintain audit-ready documentation, evidence libraries, and control mapping artifacts
Strong written and oral communication skills; ability to translate technical risk into business-level language for executive audiences
Demonstrated experience identifying, investigating, and mitigating cyber-enabled fraud, including business email compromise (BEC), invoice fraud, and payment diversion schemes

Benefits

Comp & perks

Comprehensive health benefits: Medical, Dental, and Vision
Life insurance and disability coverage
401(k) retirement plan with employer contribution
Paid time off, holidays, and sick leave per company policy