Lead Security Engineer

Chromalloy is a global engineering & solutions company. We are a leading provider of aftermarket parts, repairs, and solutions that safely & reliably extend the life of aircraft engines and gas turbines. We develop, manufacture and repair critical turbine components for a range of engine platforms. Our solutions support the engines running the aerospace, energy and defense industries around the world.

Chromalloy employees are proud, passionate problem-solvers who strive to live our values every day. A career with Chromalloy is an opportunity to learn from top industry experts, work with important technologies, and unlock a passion for innovation. Join our team of experts, innovators and problem-solvers delivering world-class solutions for our customers. As a global company, we are committed to creating an inclusive environment where all employees feel represented, heard, and able to bring their best selves to work every day.

Be part of something bigger with Chromalloy!

Our Total Rewards Program is designed to support you today and in the future.

• Comprehensive and flexible benefit options starting on day one
  , including medical, dental, vision, EAP, wellness incentives, and 401(k) with employer matching.
• Development & progression opportunities for every employee - regular performance conversations, training and development curriculum, and engineering fellowship programs.
• Paid time off, including vacation, sick time, paid holidays, and parental leave- all eligible on your first day of employment
  !
• Competitive pay, including eligibility for quarterly and annual bonuses
  , depending on role and site.

Eligibility for individual benefit plans may vary based on employment status.

We are seeking a highly experienced Lead Security Engineer to lead and support advanced cybersecurity initiatives across our enterprise, with a strong emphasis on aerospace and defense manufacturing environments. This role requires deep technical expertise in data protection, operational technology (OT) governance, digital forensics, and secure infrastructure. The ideal candidate will have a proven track record in implementing NIST 800-171 controls and supporting compliance efforts in regulated industries.

Work schedule:

Hybrid

• Serve as a technical lead and subject matter expert for cybersecurity projects and initiatives.
• Design, implement, and maintain security architectures that align with business and regulatory requirements.
• Collaborate with cross-functional teams including IT, engineering, legal, and compliance to ensure security is embedded across systems and processes.
• Conduct risk assessments and threat modeling to identify vulnerabilities and recommend mitigation strategies.
• Develop and maintain security plans, and procedures, support maintenance of policies and standards.
• Monitor and respond to security incidents, ensuring timely resolution and documentation.
• Mentor junior security analysts and leads and contribute to team development and knowledge sharing.
• Stay current with emerging threats, technologies, and industry best practices.
• Support audits, assessments, and reporting for internal and external stakeholders.
• Advocate for security awareness and training across the organization.

• DLP Strategy & Execution
  Lead the evaluation, selection, and deployment of modern Data Loss Prevention (DLP) solutions to replace legacy systems, ensuring alignment with compliance and business needs.
• Operational Technology (OT) Governance
  Develop and enforce security policies and controls for OT environments, including IC S/SCADA systems, with a focus on secure integration in aerospace and defense manufacturing settings.
• Digital Forensics & Investigations
  Conduct forensic analysis of security incidents, support internal investigations, and maintain proper chain-of-custody and evidence handling procedures.
• Digital Signatures & Email Encryption
  Design and manage enterprise-wide digital signature and secure email encryption solutions to protect sensitive communications and intellectual property.
• Systems Hardening & STIG Compliance
  Lead efforts to harden systems across the enterprise, with a strong focus on applying DISA STIGs and other industry benchmarks to ensure secure configurations for Windows and Linux OSes, networking with PAN firewalls and Global Protect VPN, O365, Team Center, and other organizational systems.
• Classification Suite Replacement
  Lead the transition from legacy data classification tools to modern, automated classification and labeling solutions that support compliance with NIST 800-171 and ITAR.
• Zero Trust Architecture Implementation
  Drive the design and implementation of Zero Trust principles across identity, device, network, and application layers.
• Secure Access Service Edge (SASE)
  Architect and deploy SASE solutions to unify networking and security services, enabling secure access for distributed and hybrid work forces.
• NIST 800-171 Compliance
  Ensure security controls and processes align with…