Hyliion is seeking a Senior Cybersecurity Engineer to own day-to-day cybersecurity operations across a cloud-native, Microsoft-centric environment, focusing on identity and access management, endpoint security, cloud/SaaS security, and AI governance. The role includes maintaining the System Security Plan (SSP) and controls for a CMMC Level 2 enclave with NIST 800-171 compliance, and ensuring annual affirmation in SPRS. Responsibilities include administering Microsoft Entra ID (Azure AD) Conditional Access, identity protection, and Privileged Identity Management (PIM) to enforce least-privilege and zero-trust principles; managing endpoint security end-to-end (patch management, vulnerability remediation, EDR, and device compliance) across Windows, macOS, and mobile devices using Defender for Endpoint and Intune; overseeing the Microsoft Defender suite (Defender for Office 365, Defender for Cloud Apps, Defender for Identity) with policy tuning and incident response; coordinating with the Red Canary Managed Detection and Response (MDR) provider for incident escalations and threat intelligence review; administering MDM/Intune enrollment and compliance policies; governing the security of Hyliion’s SaaS footprint (SaaS Security Posture Management), including OAuth/app permission reviews, shadow IT discovery, and third-party app risk assessment; monitoring AI platform usage, enforcing data-handling policies, and assessing AI vendor risk; monitoring, triaging, and responding to cybersecurity incidents; maintaining security policies and documentation supporting NIST 800-171, CMMC, SO

Hyliion is seeking a Senior Cybersecurity Engineer to own day-to-day cybersecurity operations across a cloud-native, Microsoft-centric environment, focusing on identity and access management, endpoint security, cloud/SaaS security, and AI governance. The role includes maintaining the System Security Plan (SSP) and controls for a CMMC Level 2 enclave with NIST 800-171 compliance, and ensuring annual affirmation in SPRS. Responsibilities include administering Microsoft Entra ID (Azure AD) Conditional Access, identity protection, and Privileged Identity Management (PIM) to enforce least-privilege and zero-trust principles; managing endpoint security end-to-end (patch management, vulnerability remediation, EDR, and device compliance) across Windows, macOS, and mobile devices using Defender for Endpoint and Intune; overseeing the Microsoft Defender suite (Defender for Office 365, Defender for Cloud Apps, Defender for Identity) with policy tuning and incident response; coordinating with the Red Canary Managed Detection and Response (MDR) provider for incident escalations and threat intelligence review; administering MDM/Intune enrollment and compliance policies; governing the security of Hyliion’s SaaS footprint (SaaS Security Posture Management), including OAuth/app permission reviews, shadow IT discovery, and third-party app risk assessment; monitoring AI platform usage, enforcing data-handling policies, and assessing AI vendor risk; monitoring, triaging, and responding to cybersecurity incidents; maintaining security policies and documentation supporting NIST 800-171, CMMC, SO