Description

Company Background and Position Summary

Vaylent is a Cerberus-backed aerospace and defense manufacturing platform building the enterprise infrastructure, capabilities, and operational foundation to support a growing network of manufacturing companies, including Votaw Precision Technologies. Through its operating companies, Vaylent supports demanding aerospace, defense, and industrial programs by combining advanced manufacturing expertise with scalable business and technology infrastructure.

This position reports directly to the Chief Information Officer and carries platform-wide technical scope across all Vaylent operating environments. It is a senior individual-contributor role with meaningful technical ownership and direct access to decision-making. This is an engineering role. You will spend your time inside the technology — identifying weaknesses, designing controls, implementing them and validating that they work. It is not a SOC analyst role, and it is not a GRC or documentation role.

You own security requirements, architecture, standards, baselines, and technical validation. Infrastructure and network engineering owns operation of the underlying infrastructure. In shared areas — firewall policy, segmentation, secure remote access, identity, cloud — the teams design and sustain controls jointly. You will spend your time inside the technology — identifying weaknesses, designing controls, implementing them and validating that they work.

What You Will Work On

Security engineering across Microsoft 365, Entra ID, Defender, Intune, Active Directory, and Windows environments.
Conditional Access, MFA, privileged access, identity protection, and device compliance.
Security architecture and controls in Microsoft 365 GCC High and AWS GovCloud.
Technical ownership of the vulnerability-management lifecycle, from identification and prioritization through remediation coordination and validation.
Secure configuration standards and hardening for Windows, Linux, network devices, endpoints, and cloud services.
Technical partnership with a 24×7 managed SOC/MDR provider. The provider handles continuous monitoring and initial alert triage; you own internal escalation, investigation, containment coordination, and remediation.
Security requirements for network segmentation, firewall policy, and secure remote access, in partnership with infrastructure and network engineering.
Cybersecurity across manufacturing, OT, IoT, and CNC environments, balanced against production availability and safety.
Technical controls supporting NIST SP 800-171 and CMMC Level 2.
Secure integration of newly acquired companies, facilities, and networks.
Close partnership with infrastructure and network engineering, platform systems administration, enterprise applications, and site IT support.

Requirements

What You Will Need

One of the following:

Bachelor’s degree in Cybersecurity, IT, Computer Science, Engineering, or a related discipline and 6+ years of relevant experience.
Graduate degree in a related discipline and 4+ years of relevant experience.
10+ years of directly relevant experience in lieu of a degree.

Plus:

Hands-on experience in cybersecurity engineering, infrastructure security, or security-focused systems administration.
Working knowledge of Microsoft security technologies — Entra ID, Defender, Intune, Conditional Access, MFA, Active Directory, or comparable platforms.
Experience with vulnerability management, secure configuration, and system hardening.
Working knowledge of network security — segmentation, firewalls, VPNs, secure remote access — and cloud-security principles including IAM, encryption, logging, and least privilege.
The ability to investigate complex security issues independently and implement practical fixes.

Nice to Have

Aerospace, defense, federal contracting, or regulated manufacturing background.
Microsoft 365 GCC High, Azure Government, or AWS GovCloud experience.
NIST SP 800-171 or CMMC Level 2 implementation experience.
Experience securing manufacturing, OT, IoT, or CNC environments.
PowerShell, Python, or infrastructure-as-code experience.
Certifications such as Security+, CySA+, CISSP, CCSP, GIAC, Microsoft Security, or AWS Security are welcome but not required.

Personal Attributes

Highly self-motivated and directed.
Keen attention to detail.
Ability to effectively prioritize and execute tasks in a high-pressure environment.
Ability to work both independently and in a team-oriented, collaborative environment.

Work Conditions

This position operates within a precision manufacturing environment supporting the production of mission-critical aerospace and defense components. Success requires a high sense of urgency, attention to detail, proactive problem-solving, and the ability to coordinate effectively across multiple departments to ensure uninterrupted manufacturing operations and customer delivery commitments.
Travel to company operating locations as required (up to 20%).

Additional Requirements

This position requires the use of information or access to hardware subject to the International Traffic in Arms Regulations (ITAR). All applicants must be U.S. persons as defined by ITAR.
A U.S. security clearance is not required. An active or recently active DoD Secret clearance is a plus.

Your actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge, skills, education, and experience.

Vaylent is an Equal Opportunity Employer including Disability/Vets.