CMMC Compliance Engineer

What You’ll Do

• Support CMMC compliance initiatives including gap assessments, documentation, and remediation efforts;
• Aid in the development and maintenance of cybersecurity policies, procedures, and System Security Plans (SSPs);
• Implement and maintain security controls aligned with NIST SP 800-171 and CMMC requirements;
• Coordinate with internal teams to ensure secure handling of Controlled Unclassified Information (CUI);
• Conduct risk assessments, vulnerability scans, and continuous monitoring activities;
• Support internal and external audits and assessments related to compliance;
• Monitor security tools including SIEM and EDR platforms;
• Respond to incidents and contribute to user training and awareness programs on cybersecurity best practices;
• Support general IT operations including system administration, troubleshooting, and user support across the ACS team.

What You’ll Need

• Bachelor’s degree in Cybersecurity, Information Technology, or a related field, or equivalent experience;
• 2+ years of experience in cybersecurity or compliance-focused roles;
• Familiarity with CMMC, NIST SP 800-171, and/or NIST CSF; experience supporting DoD contractors or defense industry environments is a plus, as is hands-on experience preparing for CMMC Level 2 assessments;
• Experience with security tools and frameworks including SIEM, vulnerability management, and endpoint protection; familiarity with Microsoft 365 security and compliance tools is a plus;
• Strong understanding of access control, incident response, and risk management; comfortable working in a fast-paced startup environment;
• Active or previously held TS/SCI clearance required.