Our client in Whippany, NJ, is seeking an experienced IT Security Lead to join their team!
This is an onsite/full-time/full-time position Salary range based on experience: $145k-$170k
About the Role
In this role, you will help build, operate, and continuously strengthen our internal security program. Your responsibilities will span security operations, identity and access management, endpoint and network defense, vulnerability management, vendor risk, compliance, incident response, business continuity, and helping employees work securely. This role is intended for a professional with broad information technology and security experience who can operate independently, coordinate across teams, and grow into a senior internal security role.
Essential Job Duties and Responsibilities
Monitor SIEM and EDR alerts, investigate threats, and support incident containment, escalation, and response.
Manage identity and access controls, including SSO, MFA, Active Directory, Microsoft Entra ID, privileged access, employee transitions, and periodic access reviews.
Maintain endpoint security through EDR, patching, secure configurations, software controls, encryption, and exception remediation.
Support network security, including firewalls, access controls, VPNs, segmentation, wireless security, secure configurations, and monitoring.
Coordinate vulnerability scanning, risk-based prioritization, remediation with system owners, closure validation, and reporting.
Support incident response, disaster recovery, and business continuity planning and testing to meet recovery objectives.
Support customer, contractual, and regulatory compliance, including CMMC, DFARS, ITAR and other U.S. export controls; where applicable, NIS2, Cyber Essentials/Plus, CMS, DCPP, ISO/IEC 27001, and GDPR.
Maintain security policies, procedures, plans, risk registers, diagrams, control records, and audit evidence; support customer questionnaires and audits.
Assess supplier and service-provider security risks, review controls, and track remediation and risk acceptances.
Deliver security awareness, role-based training, phishing simulations, and onboarding guidance on incident reporting and CUI/FCI protection.
Advise employees on security questions, suspicious emails, lost devices, access requests, and other concerns.
Evaluate, recommend, implement, and document security technologies, standards, configurations, processes, and runbooks to scale the security program.
Collaborate with internal teams, service providers, and assessors; participate in an on-call rotation as needed.
Education, Experience, and Skills Required
3+ years in information security, IT operations, or a related field, with hands-on experience across multiple security domains.
Working knowledge of SIEM, EDR, vulnerability scanning, identity providers, cloud platforms, and tools such as CrowdStrike Falcon, Tanium, ThreatLocker, Microsoft Entra ID, or equivalents.
Strong fundamentals in networking, Windows, Active Directory, Microsoft 365, authentication protocols, endpoint management, firewalls, VPNs, and secure configuration.
Practical knowledge of CMMC and protecting Controlled Unclassified Information (CUI) and Federal Contract Information (FCI); familiarity with DFARS, ITAR, export controls, NIST guidance, and ISO/IEC 27001 or comparable frameworks.
Willingness to join an on-call rotation and provide after-hours support as needed.
Experience supporting or leading internal, customer, regulatory, or certification audits and managing remediation through closure.
Experience in defense, aerospace, manufacturing, or other regulated environment that handles CUI, FCI, or export-controlled information.
Experience with cloud security posture management and Microsoft GCC High or other regulated cloud environments.
Familiarity with offensive security concepts, penetration-test findings, attack-path analysis, and related tooling.
Experience developing and testing incident-response, ransomware-recovery, disaster-recovery, and business-continuity plans.
Experience coordinating managed security service providers, security consultants, assessors, and third-party review partners.
Applicants must be authorized to work in the U.S.We are an equal-opportunity employer. We do not discriminate in hiring or employment against any individual based on race, color, gender, national origin, ancestry, religion, physical or mental disability, age, veteran status, sexual orientation, gender identity or expression, marital status, pregnancy, citizenship, or any other factor protected by anti-discrimination laws.