As a Cybersecurity Specialist at API, you will take point on the company's CMMC and CUI compliance program and its day-to-day security operations, working alongside the Systems Administrators and Helpdesk to keep a defense contractor's environment secure and audit-ready. This is a full-time, onsite position (40 hours per week). You will join a dynamic team supporting a diverse tech stack including Microsoft 365 GCC High, Microsoft Defender, Arctic Wolf, Intune, Entra ID, Fortinet, VMware, Veeam, NetSuite, etc. You will also support, and may be appointed as, the Information System Security Officer (ISSO) for the company's classified information system.
Key Responsibilities: include the following: other duties may be assigned as needed.
- Serve as the company lead for CMMC Level 2 and NIST SP 800-171 compliance: maintain the System Security Plan (SSP), Plans of Action and Milestones (POA&Ms), and SPRS score, and prepare the company for its CMMC third-party (C3PAO) assessment.
- Own the identification, marking, handling, and flow of Controlled Unclassified Information (CUI), including the CUI boundary across the Microsoft 365 GCC High tenant and on-premises systems.
- Serve as the primary point of contact for the Arctic Wolf Managed Detection and Response (MDR) service: triage and respond to alerts and escalations, maintain sensor and agent coverage, and track findings to closure.
- Administer Microsoft Defender (Endpoint, Office 365, Identity, and Cloud Apps) and Microsoft Secure Score: tune policies, investigate incidents, and drive remediation of recommendations.
- Run the vulnerability management program: review scan results, prioritize findings by risk, coordinate patching with the Systems Administrators, and verify remediation.
- Lead incident response: maintain the incident response plan, conduct tabletop exercises, coordinate investigations, and meet DFARS [redacted] 72-hour incident reporting requirements.
- Review firewall rules, conditional access policies, Intune compliance and configuration baselines, backups, and audit logging against NIST 800-171 controls; document findings and track them to closure.
- Assist with, or serve as, the Information System Security Officer (ISSO) for the company's classified information system under 32 CFR Part 117 (NISPOM): continuous monitoring, audit log review, account and access management, security review of system changes, and assessment documentation, in coordination with the ISSM and FSO.
- Respond to customer and supplier security assessments and questionnaires, and perform security reviews of new software, vendors, and services.
- Develop and maintain security policies, procedures, and compliance evidence, and deliver security awareness and phishing training to employees.
- Partner with IT staff on secure configuration of new systems, the software approval process, and access controls for onboarding and offboarding.
- Perform additional tasks, projects, and assignments as requested by IT Manager.
Qualifications: The requirements listed below are representative of the knowledge, skill, and/or ability required.
Education and/or Experience:- Bachelor's degree in Cybersecurity, Information Technology, or a related discipline with 3-5 years of IT and/or cybersecurity experience, or equivalent training, experience, and certification. Experience at a DoD contractor or in a regulated environment preferred.
Desired Certifications:- Sec+, CySA+, CISSP, Microsoft Security Operations Analyst (SC-200), CMMC Certified Professional (CCP), etc.
Technical Skills Needed:- Microsoft Defender XDR, Secure Score, and Purview (sensitivity labels, DLP) in Microsoft 365 GCC High.
- Managed detection and response (MDR) / SOC workflows (Arctic Wolf or similar) and SIEM log analysis.
- Entra ID and Intune security: conditional access, MFA, compliance policies, and configuration baselines.
- Vulnerability scanning and remediation tracking (Tenable/Nessus or similar).
- Firewall and network security fundamentals (Fortinet or similar), including segmentation, VPN, and TCP/IP.
- Windows Server, Active Directory, and Group Policy security and audit logging.
- PowerShell scripting; familiarity with NIST SP 800-53, 32 CFR Part 117 (NISPOM), or DCSA assessment processes a plus.
Other Skills and Abilities:- Write clear, accurate policies, procedures, and audit evidence that hold up to an assessor.
- Explain security requirements in plain language to users and leadership, both verbally and in writing.
- Define problems, collect data, establish facts, and draw valid and concise conclusions.
- Stay calm and methodical during a security incident and follow documented procedures.
- Manage multiple compliance deadlines and projects of varying length.
- Exercise discretion and sound judgment with sensitive and classified information.
- Positive, self-motivated individual who can complete tasks independently and as part of a team.
Security Clearance:Active DoD security clearance or ability to obtain one required. ISSO duties require an active clearance at the level of the classified system.
The likely salary range for this position is $110,000 to $150,000. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.
The above salary range represents a general guideline; however, API considers a number of factors when determining base salary offers such as the scope and responsibilities of the position and the candidate's experience, education, skills and current market conditions.
