CMMC安全工程师
CMMC Security Engineer
我们寻找一名CMMC安全工程师，负责实施、维护并领导网络安全工作，以确保符合网络安全成熟度认证（CMMC）标准，重点关注为国防工业基础（DIB）组织保护受控非密信息（CUI）。
主要职责
- 设计、实施并监控符合CMMC要求的安全控制措施，包括访问控制、加密、端点保护和安全配置。
- 领导漏洞评估、扫描修复跟踪和跨混合云环境的持续风险管理。
- 支持事件响应、威胁狩猎和网络安全事件的取证分析。
- 准备并组织CMMC评估（自评和第三方评估），维护认证文档（SSP、POA&M），并处理审计发现的问题。
- 与合规经理、法律/数据保护官员和运营团队协作，确保持续符合NIST SP 800-171/DFARS控制要求。
- 监督CMMC持续监控计划，并识别流程中的合规差距。
- 提供安全意识培训，推动各部门的网络安全警觉文化。
所需技能
- 深入理解CMMC 2.0框架、NIST SP 800-171和DFARS要求。
- 具有技术评估、漏洞管理和实施FedRAMP Moderate或同等系统的经验，用于保护CUI。
- 强大的文档编写能力，用于政策、流程和审计支持。
- 能够向技术和非技术利益相关者传达技术发现。
- 熟悉云（如Azure、Microsoft 365）和本地安全技术。
典型资格
- 信息安全、计算机科学或相关领域的学士学位。
- 专业认证如CISSP、CISM、GIAC或CCA/CCP（CMMC相关认证优先）。
- 具有支持国防部合规或联邦合同的经验者优先。
职位目的
该职位确保CUI的安全合规环境，降低网络安全风险，领导合规项目，并为在不断发展的CMMC 2.0法规下的第三方评估和审计做好准备。
最初发布于Himalayas
查看英文原文
We are looking for a CMMC Security Engineer is responsible for implementing, maintaining, and leading cybersecurity efforts to ensure compliance with the Cybersecurity Maturity Model Certification (CMMC) standards, focusing on protecting Controlled Unclassified Information (CUI) for organizations in the Defense Industrial Base (DIB).
Key Responsibilities
- Design, implement, and monitor security controls aligned with CMMC requirements, including access controls, encryption, endpoint protection, and secure configurations.
- Lead vulnerability assessments, scan remediation tracking, and continuous risk management across hybrid and cloud environments.
- Support incident response, threat hunting, and forensic analysis for cybersecurity events.
- Prepare for and facilitate CMMC assessments (self and third-party), maintain certification documentation (SSP, POA&M), and address audit findings.
- Collaborate with compliance managers, legal/data protection officers, and operations teams to ensure continuous alignment with NIST SP 800-171/DFARS controls.
- Oversee CMMC continuous monitoring programs and identify compliance gaps in workflows.
- Provide security awareness training and promote a culture of cybersecurity vigilance across departments.
Required Skills
- Deep understanding of CMMC 2.0 framework, NIST SP 800-171, and DFARS requirements.
- Experience conducting technical assessments, vulnerability management, and implementing FedRAMP Moderate or equivalent systems for CUI.
- Strong documentation skills for policies, procedures, and audit support.
- Ability to communicate technical findings to both technical and non-technical stakeholders.
- Knowledge of cloud (e.g., Azure, Microsoft 365) and on-premise security technologies.
Typical Qualifications
- Bachelor’s degree in Information Security, Computer Science, or a related field.
- Professional certifications such as CISSP, CISM, GIAC, or CCA/CCP (CMMC-specific certifications preferred).
- Experience supporting DoD compliance or federal contracts is highly valued.
Job Purpose
The role ensures a secure and compliant enclave for CUI, mitigates cybersecurity risks, leads compliance projects, and prepares for third-party assessments and audits under the evolving CMMC 2.0 regulations.
Originally posted on Himalayas