- Columbia, Maryland, United States
- On-site
- Full-time · Mid
- $110K–$150K per year
- 3–5 years
Take point on the company's CMMC and CUI compliance program and its day-to-day security operations, working alongside the Systems Administrators and Helpdesk to keep a defense contractor's environment secure and audit-ready.
Compensation
The likely salary range for this position is $110,000 to $150,000.
Responsibilities
- Serve as the company lead for CMMC Level 2 and NIST SP 800-171 compliance: maintain the System Security Plan (SSP), Plans of Action and Milestones (POA&Ms), and SPRS score, and prepare the company for its CMMC third-party (C3PAO) assessment.
- Own the identification, marking, handling, and flow of Controlled Unclassified Information (CUI), including the CUI boundary across the Microsoft 365 GCC High tenant and on-premises systems.
- Serve as the primary point of contact for the Arctic Wolf Managed Detection and Response (MDR) service: triage and respond to alerts and escalations, maintain sensor and agent coverage, and track findings to closure.
- Administer Microsoft Defender (Endpoint, Office 365, Identity, and Cloud Apps) and Microsoft Secure Score: tune policies, investigate incidents, and drive remediation of recommendations.
- Run the vulnerability management program: review scan results, prioritize findings by risk, coordinate patching with the Systems Administrators, and verify remediation.
Requirements
- Bachelor's degree in Cybersecurity, Information Technology, or a related discipline