CMMC Security Engineer

About the role

The CMMC Security Engineer will lead cybersecurity initiatives to ensure compliance with the Cybersecurity Maturity Model Certification (CMMC) for organizations handling Controlled Unclassified Information (CUI) in the Defense Industrial Base.

Key responsibilities

• Design, implement and monitor security controls aligned with CMMC 2.0, including access controls, encryption, endpoint protection and secure configurations.
• Lead vulnerability assessments, remediation tracking and continuous risk management across hybrid and cloud environments.
• Support incident response, threat hunting and forensic analysis for cybersecurity events.
• Prepare and facilitate CMMC assessments, maintain certification documentation (SSP, POA&M) and address audit findings.
• Collaborate with compliance, legal and operations teams to align with NIST SP 800-171/DFARS controls and oversee continuous monitoring programs.

Required profile

• Bachelor’s degree in Information Security, Computer Science or related field.
• Professional certifications such as CISSP, CISM, GIAC or CMMC‑specific credentials.
• Experience supporting DoD compliance or federal contracts.

Required skills

• Deep knowledge of CMMC 2.0, NIST SP 800‑171 and DFARS requirements.
• Technical assessment, vulnerability management and FedRAMP Moderate implementation.
• Documentation skills for policies, procedures and audit support.
• Ability to communicate findings to technical and non‑technical stakeholders.
• Experience with cloud security (Azure, Microsoft 365) and on‑premise security technologies.