CYBERSECURITY ENGINEER

About the role

The Cybersecurity Engineer serves as a subject matter expert across multiple security domains, translating technical security policies, standards, and architecture into business-impact terms. This dual-role position balances delivery of the organization’s Cybersecurity offering with a strong focus on CMMC Compliance, providing security direction to business and project stakeholders and delivering technical expertise on client engagements and internal projects.

Responsibilities

• Engage in projects during initiation, requirements, and design phases to ensure security is appropriately considered and integrated
• Review and design complex applications and technologies from a security perspective
• Evaluate and maintain security system plans and procedures to safeguard internal information systems
• Research, recommend, and implement procedural and system changes that enhance security in alignment with corporate policies
• Identify, address, and resolve key risks and issues in a manner that satisfies business objectives
• Perform security risk assessments to determine the scope and level of security services required
• Document customer systems and act as liaison between ComTec and cybersecurity vendors
• Conduct weekly review and analysis of cybersecurity reports
• Monitor assigned tickets and tasks, providing service or escalation as necessary
• Develop tasks and milestones for security projects
• Translate business and non-functional requirements into security controls and document resulting security solutions for communication and publication
• Apply analytical skills to identify problems, collect and interpret data, anticipate obstacles, and develop resolution plans; communicate findings clearly and succinctly
• Stay current with vulnerabilities, response strategies, and mitigation approaches in cybersecurity
• Design and incorporate technical security controls aligned to NIST SP 800-171 and/or CMMC requirements
• Challenge business and IT colleagues when necessary to protect company interests
• Demonstrate customer focus by evaluating decisions through the customer lens, building strong relationships, and creating processes from the customer viewpoint
• Operate effectively both independently and collaboratively within a team
• Accurately record and maintain ticket information, including notes and resolution
• Adhere to departmental policies for request and change-control reporting and management
• Maintain daily timesheet and expense report entries accurately and timely

Technical Skills

• Deep knowledge of IT network security: secure LAN, WAN, vLAN, MPLS, and secure network zoning and restricted network design
• Strong background in network engineering with deep understanding of Windows Server architecture, Windows virtualization, networking, backup solutions, and disaster recovery
• Expertise in Microsoft security architecture, including server and workstation security
• Ability to troubleshoot server-based software issues across: Microsoft Windows Server operating systems, on-premise Microsoft Exchange, hosted Microsoft Office 365, Microsoft Remote Desktop Services, Microsoft Hyper-V and VMWare, enterprise EDR/MDR solutions, and enterprise-class backup solutions
• Knowledge of server/workstation peripherals such as NAS/SAN solutions
• In-depth workstation/server hardware and software troubleshooting abilities
• Strong understanding of networking equipment including switches, firewalls, and wireless access points

Soft Skills & Abilities

• Strong written and verbal communication skills
• Pleasant and professional demeanor in all client and internal communications
• Ability to multitask effectively
• Independent worker who can complete daily tasks without direct supervision
• Strong organizational skills and efficiency in daily operations
• Ability to work well with clients at all levels, from executive to IT to end user

Education, Experience, & Knowledge

• Five years working in Information Technology
• Two years in Cybersecurity
• One year in CMMC compliance
• Information security qualifications such as CISSP, CISM, CISA, and ISSAP are a plus
• Certified CMMC Professional (CCP)
• Familiarity with NIST SP 800-171 and/or NIST SP 800-53
• Vulnerability management experience

Additional Requirements

• Occasional availability for evening or weekend work
• Valid driver’s license in state of residence and reliable personal vehicle

Work Environment / Physical Demands

• Regular use of computer and office equipment
• Ability to remain calm in stressful situations
• Performs all administrative functions expected at this level