Cybersecurity Engineer

Position Overview

Now Hiring: Cybersecurity Engineer – Safeguard Global Operations at The Pasha Group. At The Pasha Group, protecting what moves the world is at the core of our mission. You will be at the forefront of defending complex environments—from onshore offices to shipboard systems—by architecting secure solutions and ensuring business continuity across land, sea, and cloud.

Key Responsibilities

• Design, deploy, and optimize tools and strategies that protect systems and support safe global operations.
• Lead the full incident lifecycle from detection and triage to containment, eradication, and recovery.
• Coordinate security assessments, including pen tests, threat analysis, and audits supporting frameworks like NIST, ISO, and CMMC.
• Configure and manage cybersecurity tools such as Microsoft Defender, SIEM, IDS/IPS, EDR, Intune, and Azure Conditional Access.
• Harden Windows and Azure environments, protect M365 data, and implement enterprise-grade access controls.
• Identify and mitigate vulnerabilities through systematic patching, monitoring, and continuous improvement.
• Deliver cybersecurity training, facilitate tabletop exercises, and drive adoption of security best practices.
• Collaborate with IT, vessel crews, port teams, and leadership to align security initiatives with operational needs.
• Monitor security logs and alerts from multiple data sources and execute patch management and image hardening initiatives.
• Investigate, document incidents and lead after-action reviews.
• Administer and optimize PAM solutions to protect privileged access and improve Microsoft Defender security score.
• Support daily operations while preparing for evolving threats and future regulations.

Required Qualifications

• Bachelor’s or Master’s degree in Cybersecurity, Information Systems, Network Engineering, or a related field.
• 5+ years in cybersecurity with expertise in threat detection and incident response.
• 10+ years in IT infrastructure, networking, or cloud operations demonstrating proven problem-solving abilities.
• Strong command of SIEM, EDR, IDS/IPS platforms, and experience with Azure, Microsoft 365, Windows Server, Intune, GPO, and PAM.
• Proficiency in vulnerability scanning, patching, forensics, and log analysis along with familiarity of regulatory standards and security frameworks (NIST, CMMC, ISO).

Preferred Qualifications

• Relevant cybersecurity certifications such as TWIC, (ISC)², GIAC, ISACA, or CompTIA.

Benefits & Perks

• Established & Evolving: Over 75 years of trusted logistics leadership combined with a forward-looking technology strategy.
• Critical Role: Impact across terminals, logistics, transportation, and maritime operations.
• Values-Driven Culture: Thrive in an environment that prizes Excellence, Honesty & Integrity, Innovation, and Teamwork.
• Professional Growth: Take ownership of enterprise security initiatives in a high-visibility position.
• Work Environment & Travel: Engage in dynamic settings including corporate offices, vessel decks, and port terminals; occasional travel (even to locations like Hawaii) and flexible scheduling, including potential evenings, weekends, or holidays.