Principal Cybersecurity Engineer

Job Number: 26-04534

Use your skills where innovative technology solutions begin. ECLARO is looking for a Principal Cybersecurity Engineer for our client in Farmingdale, NY.

ECLARO’s client is a leading technology solutions provider, collaborating with customers to manage their needs and achieve success in their business goals. If you’re up to the challenge, then take a chance at this rewarding opportunity!

Position Overview:

• As the Principal Cybersecurity Engineer, will take ownership of designing, implementing, and continuously improving security controls across infrastructure, cloud, and software development lifecycles.
• Will align the security operations with modern Dev SecOps practices—automating security testing, enforcing secure code practices, and integrating security into CI / CD pipelines.
• Will partner closely with IT, engineering, and business teams to build a culture of proactive security that balances innovation with risk mitigation. From securing cloud environments to enabling automated compliance checks, this is a hands-on and strategic role critical to our future.
  
  

Responsibilities:

• Cybersecurity Strategy & Governance:
• Develop and execute a cybersecurity strategy aligned with NIST, CIS, and ISO frameworks.
• Define and enforce enterprise-wide security policies, standards, and architecture.
• Cloud & Infrastructure Security:
• Maintain and secure on-premise infrastructure including servers, firewalls, switches, routers, backup systems, and storage appliances.
• Implement and enforce network segmentation, access controls, and perimeter security policies on-prem.
• Monitor and manage patching, configuration baselines, and physical server security for all on-premise systems.
• Collaborate with IT operations to ensure high availability, backup integrity, and disaster recovery readiness of on-premise infrastructure.
• Integrate on-prem security telemetry with cloud-native SIEM tools.
• Ensure consistent security posture and policy enforcement across hybrid environments using Azure Arc and other hybrid tooling.
• Secure Microsoft Azure environments using Azure-native tools such as Microsoft Defender for Cloud, Azure Policy, Azure Security Center, and Azure Key Vault.
• Define Azure Entra IAM strategies, monitor configurations, and implement guardrails via policy-as-code (e.g., Bicep, Azure Blueprints).
• Risk Management & Incident Response:
• Conduct enterprise risk assessments and develop mitigation plans.
• Lead threat hunting, incident response, and root cause analysis efforts.
• Threat Detection & Vulnerability Management:
• Deploy and manage Endpoint and other tools for vulnerability scanning and log analysis.
• Conduct red / blue team exercises and coordinate remediation with IT operations and DevOps teams.
• Compliance & Audit Readiness:
• Ensure compliance with data protection and industry regulations (e.g., CCPA, GDPR, HIPAA) using Microsoft Compliance Manager.
• Maintain audit logs, control documentation, and readiness for third-party security assessments.
• Security Awareness & Culture:
• Lead employee security training programs, simulate phishing attacks, and drive secure behavior adoption.
• Foster a DevSecOps mindset across the engineering and product development lifecycle.
• DevSecOps Integration:
• Embed security practices into DevOps workflows, CI / CD pipelines, and infrastructure as code using Azure DevOps.
• Automate security checks using GitHub Advanced Security, and container scanning tools.
• Define secure development standards and review code, build, and deployment processes.
• Enable shift-left security by training developers and automating early-stage testing in Azure-based environments.
  

Preferred Qualifications:

• Bachelor's degree in Cybersecurity, Computer Science, or a related field.
• CISSP, CISM, CEH, or Microsoft Security certifications (e.g., SC-200, AZ-500, SC-100).
• 10+ years in cybersecurity with recent hands-on experience in Azure security and DevSecOps practices.
• Proven experience integrating security into Azure DevOps or GitHub CI / CD pipelines.
• Familiarity with container and orchestration security (e.g., Docker, Kubernetes on AKS).
• Strong scripting and automation capabilities (e.g., PowerShell, Python).
• Experience with Microsoft security and compliance platforms (e.g., Defender suite, Purview, Azure AD).
• Strong communication and collaboration skills with both technical and executive audiences.
• Ability to work cross-functionally and influence secure design decisions throughout the software lifecycle.
  
  

If hired, you will enjoy the following ECLARO Benefits:

• 401k Retirement Savings Plan administered by Merrill Lynch
• Commuter Check Pretax Commuter Benefits
• Eligibility to purchase Medical, Dental & Vision Insurance through ECLARO
  
  

If interested, you may contact:

Lea Enriquez

[email protected]

646-695-2941

Lea Enriquez | LinkedIn

Equal Opportunity Employer: ECLARO values diversity and does not discriminate based on Race, Color, Religion, Sex, Sexual Orientation, National Origin, Age, Genetic Information, Disability, Protected Veteran Status, or any other legally protected group status, in compliance with all applicable laws.