Role: CyberSecurity Engineer (US)
Employment Type: Full Time
Educational Qualification: Bachelor's degree in cybersecurity, computer science, information technology, engineering, or a related discipline, or equivalent professional experience.

Work Experience: 4+ Four or more years of cybersecurity engineering, security operations, cloud security, or technical compliance experience. Must be a US Citizen

Role Description:
Pixxel is seeking a Cybersecurity Engineer to implement and operate the security program supporting its U.S. aerospace and satellite operations. This role will protect endpoints, identities, networks, cloud services, business systems, and environments that process, store, or transmit FCI and CUI.

The Cybersecurity Engineer will play a central role in Pixxel's NIST SP 800-171 implementation, CMMC Level 2 assessment readiness, Body of Evidence development, incident response, vulnerability management, and continuous compliance program.

The ideal candidate can translate compliance requirements into practical security controls, validate whether controls operate effectively, maintain assessment-ready evidence, and drive remediation through completion.

C Level 2 compliance, NIST SP 800-171 implementation, and ongoing assessment readiness.

Responsibilities & Duties:

Security Engineering and Operations

• Design, implement, maintain, and improve security controls across endpoints, identities, networks, cloud services, and business applications.
• Administer and optimize CrowdStrike Falcon, endpoint detection and response, security monitoring, and next-generation SIEM capabilities.
• Monitor and investigate security alerts, suspicious activity, unauthorized access, malware, and potential data exposure.
• Lead or support incident analysis, containment, eradication, recovery, evidence preservation, and post-incident review.
• Configure and validate endpoint protection, encryption, logging, MFA, device compliance, vulnerability-management, and data-protection controls.
• Review security configurations across JumpCloud, Google Workspace Enterprise, AWS, Meraki, Fortinet, and other approved platforms.
• Support secure adoption of SaaS, cloud, AI, remote-access, and zero-trust technologies.
• Develop automation using APIs, PowerShell, Bash, Python, or infrastructure-as-code tools where appropriate.

CMMC and NIST Compliance

• Coordinate implementation and maintenance of security requirements supporting NIST SP 800-171 and CMMC Level 2.
• Translate applicable requirements into technical safeguards, operating procedures, control owners, testing methods, and evidence expectations.
• Help define and maintain the CMMC assessment scope and CUI system boundary.
• Identify where FCI and CUI are received, processed, stored, transmitted, and disposed of.
• Develop and maintain the System Security Plan, security control narratives, Body of Evidence, Plans of Action and Milestones, and supporting documentation.
• Establish evidence standards and ensure records are current, complete, approved, and retrievable.
• Perform control testing through examination, interviews, and technical validation.
• Conduct gap assessments and maintain a prioritized compliance-remediation plan.
• Track corrective actions, responsible owners, dependencies, milestones, evidence, and closure status.
• Prepare Pixxel for internal reviews, customer inquiries, SPRS-related activities, and CMMC assessments.
• Coordinate with external consultants, assessors, customers, and government stakeholders when authorized.
• Monitor changes to applicable cybersecurity requirements and recommend updates to controls, policies, procedures, and technical architecture.

Security Control Maintenance

• Manage or oversee recurring compliance activities, including:
• User and privileged-account reviews.
• Access authorization and termination reviews.
• Audit-log review and retention validation.
• Vulnerability scanning and remediation tracking.
• Patch and secure-configuration verification.
• Firewall and remote-access reviews.
• Asset, software, and system-boundary reconciliation.
• Incident-response testing.
• Backup and restoration testing.
• Security-awareness and phishing exercises.
• Risk assessments and policy reviews.
• CUI handling, transmission, storage, printing, media protection, and disposal reviews.
• Verify that recurring activities are completed on schedule and supported by appropriate evidence.
• Document deficiencies and ensure remediation is validated before closure.
• Evaluate security exceptions and present risks to the appropriate approving authority.

Vulnerability and Risk Management

• Manage the vulnerability-management lifecycle for endpoints, servers, cloud systems, applications, and network devices.
• Analyze findings, validate risk, assign remediation owners, and track corrective actions.
• Conduct technical risk assessments for systems, vendors, applications, and material infrastructure changes.
• Review proposed technology for security, privacy, CUI, export-control, and compliance considerations.
• Maintain risk registers and communicate material risks clearly to technical owners and leadership.
• Escalate overdue remediation, control failures, and unacceptable risk promptly.

Incident Response

• Maintain Pixxel's cybersecurity incident response plan, procedures, severity criteria, escalation paths, and communication requirements.
• Coordinate incident detection, triage, containment, eradication, recovery, reporting, and lessons-learned activities.
• Support investigation and reporting of incidents that may affect FCI, CUI, government information, credentials, or company systems.
• Conduct incident-response tabletop exercises and track improvement actions.
• Preserve incident records and technical evidence in accordance with applicable contractual and legal requirements.
• Coordinate with legal counsel and leadership concerning external reporting obligations.

Policy, Documentation and Training

• Draft and maintain cybersecurity policies, standards, procedures, plans, control narratives, and technical guidance.
• Ensure written requirements accurately reflect Pixxel's actual operating environment.
• Maintain evidence repositories, document-control records, approvals, review dates, and version history.
• Develop cybersecurity guidance and training for employees, administrators, and system owners.
• Support KnowBe4 training, phishing simulations, and corrective awareness activities.
• Provide employees with practical guidance on protecting sensitive information and reporting security concerns.

Communication and Project Ownership

• Maintain cybersecurity tasks, owners, dependencies, milestones, and evidence in Jira or another approved tracking platform.
• Provide clear and timely project and compliance status reports.
• Communicate anticipated delays, resource needs, and blockers before commitments are missed.
• Take ownership of assignments from planning through implementation, testing, evidence collection, documentation, and closure.
• Coordinate effectively with the Network and Infrastructure Engineer while maintaining clear responsibility for security validation and compliance oversight.

Present risks, findings, and recommendations in language appropriate for technical teams and company leadership.

Desirable Skills & Certifications:

• Direct experience preparing an organization for a CMMC Level 2 assessment.
• Experience developing or maintaining SSPs, POA&Ms, CUI data-flow diagrams, assessment scopes, and Bodies of Evidence.
• Experience with CrowdStrike Falcon, CrowdStrike Next-Gen SIEM, JumpCloud, Google Workspace Enterprise, AWS, Meraki, Fortinet, Jira, KnowBe4, or Zscaler.
• Familiarity with DFARS [redacted], SPRS assessments, and applicable cyber-incident reporting obligations.
• Familiarity with NIST SP 800-171 Rev. 3 and Organization-Defined Parameters.
• Experience with scripting, APIs, Terraform, or Ansible.
• Experience in aerospace, defense, satellite, manufacturing, or another regulated technical environment.
• Security+, CySA+, CISSP, CCSP, CISM, GIAC, or comparable certification.
• Hands-on experience implementing or assessing NIST SP 800-171, CMMC, NIST SP 800-53, or a comparable cybersecurity framework.
• Knowledge of protecting CUI, FCI, sensitive technical information, or regulated data.
• Experience with EDR, SIEM, vulnerability management, security monitoring, and incident investigation.
• Knowledge of identity and access management, MFA, least privilege, privileged access, and account lifecycle management.
• Experience assessing the security of Windows, macOS, Linux, network, SaaS, and cloud environments.
• Experience creating technical policies, procedures, control narratives, risk records, and assessment evidence.
• Ability to test security controls and distinguish documented intent from actual implementation.
• Strong project ownership, analytical, prioritization, and root-cause-analysis capabilities.
• Demonstrated ability to communicate realistic timelines, escalate risks, and complete work with limited supervision.
• Strong written and verbal communication skills.

Candidate Acumen:

• Continued operation and documented maintenance of assigned security controls.
• Complete, current, and retrievable assessment evidence.
• Measurable reduction in cybersecurity and compliance gaps.
• Timely remediation of vulnerabilities, findings, and POA&M items.
• Accurate SSP, system-boundary, CUI-flow, and control documentation.
• Effective incident detection, response, escalation, and recordkeeping.
• Successful internal control reviews and improved CMMC assessment readiness.
• Reliable communication of progress, risks, blockers, and schedule changes

Benefits:
Health insurance coverage
Unlimited leaves & flexible working hours
Role-based remote work and work-from-home benefit
Relocation assistance
Professional Mental Wellness services
Creche facility for primary caregivers (limited to India)
Employee Stock Options for all hires