Cyber Security Engineer
CMMC Level 2 / Cybersecurity Compliance Support
CUI / FCI scoping activities, including identifying systems, users, data flows, enclaves, cloud services, endpoints, and third-party services in scope for CMMC Level 2.
Maintain assessment-ready evidence mapped to NIST SP 800-171 control domains and CMMC assessment requirements in the System Security Plan (SSP).
Identify, track, and remediate gaps via the Plan of Action & Milestones (POA&M).
Support C3PAO third-party assessment preparation; build and maintain assessment-ready evidence packages including screenshots, configuration exports, policy references, ticket records, vulnerability scan results, audit logs, training records, and control implementation narratives.
Maintain audit logging, log integrity, and SIEM operations.
Conduct periodic vulnerability scans and coordinate remediation with the team.
Assist in developing and enforcing security policies, procedures, and user awareness training.
Ensure security-relevant changes are documented, approved, tested, and traceable through the ITSM or change management process.
Microsoft Security Platform Operations
Administer and tune Microsoft Sentinel — build and maintain analytics rules, workbooks, and incident response playbooks.
Manage Microsoft Defender for Endpoint, Identity, and Office 365 — configure policies, investigate alerts, and drive remediation.
Maintain Azure security posture including Entra ID (Azure AD), Conditional Access, PIM, and role-based access controls.
Support and manage Hyper-V virtualization environments including VM provisioning, snapshots, and performance monitoring.
Leverage Microsoft Purview for data classification, sensitivity labeling, and compliance reporting.
Infrastructure & Systems Administration
Administer and harden Windows Server, Active Directory, and Group Policy environments.
Maintain network security posture including firewall rules, VLANs, and access control configurations.
Maintain asset inventory, software inventory, secure configuration baselines, and change control evidence for servers, endpoints, network devices, cloud services, and security tools.
Support endpoint management and patch compliance using enterprise ITSM and endpoint management tooling.
Provide Tier 2/3 escalation support for security-relevant endpoint, identity, access, and infrastructure issues.
Support ERP and line-of-business application integrations from an IT infrastructure and security perspective as needed.
Security Operations
Monitor security alerts across Microsoft Sentinel and Defender, investigate incidents, and escalate per defined IR procedures.
Support DFARS 252.204-7012 cyber incident response obligations, including evidence preservation, incident documentation, escalation, and coordination with leadership and external partners.
Manage privileged access, MFA enforcement, and identity governance across on-premises and cloud environments.
Assist with endpoint detection and response (EDR) configuration and hardening baselines.
Participate in tabletop exercises and contribute to business continuity and DR planning.
Coordinate with external MSPs, CMMC consultants, C3PAOs, auditors, software vendors, and managed security providers to support remediation, evidence collection, and assessment readiness.