Summary

We are seeking a highly motivated and passionate compliance-focused cybersecurity engineer. Experience with CMMC (initial certification as well as maintaining certification) and NIST SP 800-171 is required. Additional compliance frameworks would be valuable but not required.

Pay Rate: $100,000 / year

Duties and Functions

• Support all CMMC Level 1 / Level 2 preparation activities, including gathering, reviewing, and maintaining evidence across control families.
• Maintain and update System Security Plans (SSPs) and associated compliance documentation for CUI environments.
• Support configuration, readiness, and security testing of the security controls, ensuring controls are implemented, monitored, and aligned with compliance requirements.
• Assist in managing, tracking, and validating POA&Ms for open findings or incomplete controls.
• Assist in managing Security Risk Register.
• Assist in the development of compliance-aligned cybersecurity training, awareness evidence, and documentation updates.
• Provide additional support to different security domains and tools as part of rotational assignments.

Education and Experience

• Bachelor’s Degree from an accredited college/university in a related field; equivalent combination of education and experience may be substituted.
• 2+ years of experience in security-related professions with a focus on compliance and risk management.

Preferred Requirements

• CMMC Registered Practitioner (RP) or Certified Professional (CP)

Knowledge/Skills/Abilities (KSA)

Knowledge

• CMMC Level 1 and Level 2 Requirements
• Comprehensive understanding of NIST 800-181
• Creation and maintenance of System Security Plans (SSPs) and Plan of Actions and Milestones (POA&Ms)
• Understanding of security control implementation, monitoring and assessment

Skills

• Solid technical understanding to validate implementation of security controls.
• Strong organizational skills and attention to detail to maintain audit-ready documentation.

Ability

• Ability to manage multiple tasks and collaborate across multiple organizational departments.
• Ability to communicate clearly with technical and non-technical stakeholders
• Ability to support rotational assignment across security domains, tools and technologies

Supervisory Responsibilities

• Non-Supervisory Position but will be coordinating tasks across multiple organizations within the company.

Work Environment/Condition

• An indoor office space with proper lighting and climate-controlled setting.

Physical Demands

• Prolonged periods of sitting at a desk and working on a computer.
• Must be able to lift up to 15 pounds at a time.

Acknowledgement

Loyal Source does not discriminate in employment based on race, color, religion, sex (including pregnancy and gender identity), national origin, political affiliation, sexual orientation, marital status, disability, genetic information, age, membership in an employee organization, retaliation, parental status, military service, or other non-merit factors.

This job description is not an exclusive or exhaustive list of all job functions that an employee in this position may be asked to perform. All employees are required to perform the essential functions, physical demands and intended purpose of their role in a satisfactory manner.

I attest that I can perform the essential job functions as outlined in this job description with or without any reasonable accommodation(s). I understand if I want to inquire about or seek reasonable accommodations, I am required to contact Human Resources at HR@loyalsource.com.

I acknowledge that I have read and understand the essential job functions, work environment/conditions, exemption classification and physical demands set forth in the job description provided for my position.

If you are a qualified individual with a disability or a disabled veteran, you may request a reasonable accommodation by contacting HR at HRmgt@loyalsource.com. If you are unable or limited in your ability to access job openings or apply for a job on this site as a result of your disability, please select the accessibility menu to the (right or left) for more assistance. You can also request reasonable accommodations by contacting a telecommunications relay service by dialing 711 for direct access and assistance (tty).

This contractor and subcontractor abides by the requirements of 41 CFR 60-300.5(a) and 41 CFR 60-741.5(a).
These regulations prohibit discrimination against qualified individuals on the basis of protected veteran status or disability, and require affirmative action by covered prime contractors.