RemoteLeaf Logo
Log in Sign up

Cybersecurity Engineer

4 hours, 25 minutes ago
United States
Full-time
Senior
Security Engineer
Cybersecurity
Cybersecurity
Apply Now
Nooks

Nooks

Nooks specializes in transforming the classified ecosystem by providing innovative solutions that enhance collaboration between the national security community and the private sector, ultimately addressing critical national security challenges through ...

Professional Services
1-10
Founded 2021
$3M raised
View All Jobs 2

Description

  • Own the unclassified environment’s NIST SP 800-171 and CMMC Level 2 compliance posture and maintain the System Security Plan.
  • Track findings and vulnerabilities, manage POA&Ms, and drive remediation to completion.
  • Generate and maintain SPRS scores and identify compliance gaps ahead of third-party assessments.
  • Plan and execute technical self-assessments and internal audits of the unclassified network.
  • Prepare for C3PAO assessments by organizing evidence, interviewing technical staff, and maintaining audit readiness.
  • Secure and monitor Google Workspace, Microsoft environments, Active Directory, Group Policy, remote access, DLP, access controls, and MDM.
  • Monitor configuration drift against the CUI baseline and enforce change-management requirements.
  • Evaluate enterprise software, third-party tools, and vendors for compliance and security risks.
  • Collaborate with Enterprise IT, Cyber Operations, leadership, and external assessors to remediate findings and communicate risk.

Requirements

  • U.S. citizenship and authorization to work in the United States.
  • 5–8 years of cybersecurity experience, including at least 3 years focused on NIST SP 800-171 compliance and implementation.
  • Experience securing Google Workspace in a regulated environment, including Drive, Gmail, and endpoint-management controls.
  • Ability to independently conduct technical self-assessments, test controls, and gather evidence.
  • Deep knowledge of DFARS 252.204-7012/7019/7020, NIST SP 800-171, and CMMC Level 2 assessment guides.
  • Active DoD 8570/8140 IAM Level II or III certification, such as CISSP, CISM, CASP+, or CAP.
  • Strong technical writing and communication skills for leadership and external auditors.
  • CMMC Certified Professional or Registered Practitioner certification preferred.
  • Google Professional Cloud Security Engineer or Professional Google Workspace Administrator certification preferred.
  • Active Secret or Top Secret clearance, formal SCA/QSA experience, and familiarity with EDR/SIEM tools preferred.

Benefits

  • $145,000–$163,000 base salary.
  • Performance bonus.
  • Equity.
  • Medical, dental, and vision insurance.
  • Paid time off.
  • 401(k) plan.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Dijital Team

Senior Microsoft Engineer (Level 3) | Azure | M365 | Security

Dijital Team 11-50 Internet Software & Services

A Senior Microsoft Engineer (Level 3) will serve as a technical authority for a managed IT services provider, resolving complex issues and improving the security, reliability, and efficiency of multi-tenant Microsoft cloud environments for commercial customers.

Sri Lanka Full-time Senior Cloud Engineer Security Engineer
Azure Cybersecurity PowerShell
4 hours, 40 minutes ago
Jobandtalent

HQ - Lead Information Security Engineer

Jobandtalent 1K-5K Professional Services

Job&Talent is seeking a Lead Information Security Engineer to lead a team of four and strengthen incident response, threat detection, cloud security, and security operations for its global AI-powered workforce platform.

Spain Full-time Lead Security Engineer
AWS Azure CI/CD SIEM
4 hours, 40 minutes ago
ITHAKA

Platform Security Engineer

ITHAKA 251-1K Diversified Consumer Services

ITHAKA is seeking a Platform Security Engineer to mature its DevOps practices into DevSecOps by integrating security automation, tooling, and secure-by-default workflows across software delivery and infrastructure.

United States Full-time Mid Level Security Engineer
$110k-$120k
AWS CI/CD DevSecOps
1 day, 4 hours ago
Pathward

Director, Identity and Access Management

Pathward 251-1K Diversified Financial Services

Pathward is seeking an Information Security leader to develop and execute strategic security plans while supporting application security, identity and access management, GRC, risk, compliance, and security assessments in a hybrid remote environment.

Anywhere Full-time Executive Security Engineer
$125k-$208k
2 days, 3 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers