Cybersecurity Engineer

We are seeking an experienced Cybersecurity Engineer to lead the security and compliance of a complex, unclassified IT environment supporting sensitive defense and national security operations. In this hands-on individual contributor role, you will strengthen security controls, assess technical configurations, and maintain compliance with NIST SP 800-171 and CMMC Level 2 requirements. You will take ownership of compliance documentation, technical self-assessments, vulnerability remediation, and audit readiness while helping build and improve an evolving cybersecurity program. Working closely with enterprise IT, cybersecurity operations, and organizational leadership, you will translate regulatory requirements into practical security measures that protect Controlled Unclassified Information (CUI). This opportunity is ideal for a technically strong security professional who enjoys taking initiative, improving processes, and balancing rigorous compliance standards with real-world infrastructure needs. You will play a critical role in maintaining security, accountability, and trust across cloud, hybrid, and enterprise systems.

• U.S. citizenship is required, along with authorization to work in the United States, due to requirements associated with access to CUI and ITAR-related data.

• Five to eight years of professional cybersecurity experience, including at least three years specifically focused on NIST SP 800-171 compliance and implementation.

• Demonstrated experience configuring and securing Google Workspace in a regulated environment, including security and compliance controls across Drive, Gmail, and endpoint management.

• Proven ability to independently conduct technical security self-assessments, test control effectiveness, identify deficiencies, and collect defensible evidence for audit purposes.

• In-depth knowledge of NIST SP 800-171, CMMC Level 2 assessment guides, and applicable Defense Federal Acquisition Regulation Supplement (DFARS) requirements, including clauses 252.204-7012, 252.204-7019, and 252.204-7020.

• An active DoD 8570/8140 IAM Level II or Level III certification, such as CISSP, CISM, CASP+, or CAP.

• Strong technical documentation skills and the ability to explain complex security requirements, risks, and remediation plans to non-technical stakeholders and external auditors.

• Experience working across cloud-based and hybrid IT environments, with a practical understanding of access controls, configuration management, endpoint security, and compliance monitoring.

• Strong analytical and organizational skills, with the ability to manage multiple findings, changing priorities, and evolving compliance requirements independently.

• Excellent communication and collaboration skills, particularly when coordinating remediation efforts across IT, cybersecurity, and business teams.

• A CMMC Certified Professional (CCP) or Registered Practitioner (RP) credential is preferred.

• Google Professional Cloud Security Engineer or Professional Google Workspace Administrator certification is an advantage.

• An active Secret or Top Secret security clearance is a plus but is not required for this role.

• Experience as a formal Security Control Assessor (SCA) or Qualified Security Assessor (QSA) is preferred.

• Familiarity with endpoint detection and response (EDR), security information and event management (SIEM), and incident-response tools is beneficial.