[Remote] Cybersecurity Operations Engineer

Note: The job is a remote job and is open to candidates in USA. Lanteris Space Systems is seeking an experienced Cybersecurity Operations Engineer to serve as the operational bridge between the organization and their Managed Security Services Provider (MSSP). The role involves ensuring the effective deployment and maintenance of security tools and services, as well as supporting incident response across the organization.ResponsibilitiesAct as liaison with our Managed Security Service Provider (MSSP), reviewing Tier 1/2 alert summaries, validating findings with organizational context, and facilitating escalations for hands-on resolutionConduct real-time troubleshooting, log analysis, endpoint forensics, and containment actions on internal systems using tools like MS Defender, Wiz, and TenableParticipate in incident response activities, ensuring timely communication with stakeholders and proper documentation of security eventsCoordinate incident response activities across cross-functional teams, ensuring timely containment, eradication, and recovery actions align with organizational priorities and compliance requirementsSupport our endpoint security solutions, including EDR (Endpoint Detection & Response) solutions across the enterpriseMonitor endpoint compliance, investigate agent health issues, and coordinate remediation with IT teamsMaintain operational access to security tools for investigation and response purposes (not responsible for development, architecture, or tuning of SOC tools)Perform regular health checks, updates, and optimization of security agents to ensure maximum coverage and performance across all organizational assetsDevelop and maintain documentation for security agent configurations, deployment procedures, and troubleshooting workflows to support operational continuityMonitor and analyze firewall logs for security events and anomalies in coordination with MSSPSupport firewall rule change requests, performing security impact assessments, and documentationConduct periodic firewall policy reviews to identify overly permissive rules and ensure alignment with least-privilege principlesCoordinate with network engineering on firewall-related security incidents and configuration changesMaintain firewall documentation, including rule justifications, change logs, and security baselinesParticipate in firewall architecture discussions to ensure security requirements are incorporatedParticipate in post-incident reviews and root cause analysis, documenting lessons learned to enhance response playbooks aligned with NIST 800-171/CMMC requirementsContribute to the refinement of MSSP SLAs, escalation procedures, and operational runbooksGenerate compliance reports, executive briefings, and threat intelligence summaries for leadership and cross-functional teams (IT, Legal, Governance, Program Security)Monitor and report on MSSP performance metrics, contributing to quarterly vendor reviews and integrating findings into risk management workflowsIdentify gaps in security coverage and recommend process improvementsParticipate in tabletop exercises and security drills to validate response capabilitiesIntegrate security findings into enterprise risk management workflowsServe as security subject matter expert for internal projects and initiativesMaintain currency with emerging threats, vulnerabilities, and security technologies relevant to the aerospace/defense sectorSkillsMust be a US Citizen with the ability to obtain a US Government security clearanceBachelor's Degree in the following area(s): Cybersecurity, Information Technology, Computer Science, or related field, four additional years of experience can be substituted for a degree8 years of hands-on experience in cybersecurity operations, incident response, or security engineering rolesExperience with endpoint protection platformsExperience with cloud security concepts and tools (Wiz, AWS security services, or similar)Experience with SIEM platforms, log analysis, and security event correlationExperience with NIST 800-171, CMMC, and DFARS cybersecurity requirementsProfessional certifications such as CISSP, GCIH, GCFA, or CEHExperience operating in aerospace, defense, or DoD/CMMC regulated environmentsScripting/automation skills (PowerShell, Python) for security operations tasksStrong collaboration skills and ability to work effectively with cross-functional teams during complex security incidentsExperience with the M365 Security stack (Defender, Sentinel, MDC, Purview)Experience with Tenable OneExperience with centralized enterprise loggingExperience with network security, including IDS/IPS, firewalls, and security architectureBenefitsPaid time offHealth and welfare insurance401(k) to eligible employeesIncentive eligible with a target based on contribution, company performance, and/or individual results achieved; the specific incentive plan and target amount will be determined based on the role and breadth of contributionsCompany OverviewLanteris Space Systems is a prominent manufacturer of satellites and space systems for government and commercial customers. It was founded in undefined, and is headquartered in Palo Alto, California, USA, with a workforce of 1001-5000 employees. Its website is https://www.lanterisspace.com.