Cybersecurity Engineer

About This Role

This individual-contributor role owns the security posture of Nooks' unclassified environment, hardening it and assessing it against NIST SP 800-171 and CMMC, and maintaining the evidence. Protecting Controlled Unclassified Information (CUI) is critical to the mission and partner trust. The Cybersecurity Engineer runs the compliance program and performs the technical work, assessing, hardening, and certifying the estate the IT team builds and operates.

Responsibilities

• Own the unclassified environment's compliance posture and maintain the System Security Plan (SSP) against NIST SP 800-171 and CMMC Level 2
• Track findings and vulnerabilities and manage Plans of Action & Milestones (POA&Ms) to drive timely remediation
• Generate and maintain SPRS scores, identifying gaps ahead of third-party assessment
• Strictly adhere to Change Management processes and the Change Control Board (CCB), ensuring all infrastructure modifications are thoroughly validated and tested prior to production deployment
• Independently plan and execute comprehensive self-assessments of the unclassified network, acting as internal auditor to validate control effectiveness
• Lead preparation for C3PAO assessments
• Compile evidence, interview technical staff, and keep the environment audit-ready at all times
• Document controls clearly for external auditors and translate requirements for non-technical leadership
• Secure and monitor both Google Workspace and Microsoft environments (Active Directory, Group Policy), ensuring proper Separation of Duties (SoD) and secure remote access configurations
• Ensure Data Loss Prevention (DLP), access controls, and mobile device management (MDM) meet CUI protection requirements
• Continuously monitor for configuration drift against the CUI baseline
• Serve as the primary cybersecurity point of contact for evaluating new enterprise software introductions
• Assess compliance requirements so new tools meet network-specific security standards and organizational policy
• Evaluate the compliance posture of third-party tools, software and vendors to preserve the chain of trust

Requirements

• U.S. citizenship (a compliance requirement for accessing CUI/ITAR data)
• 5
• 8 years in cybersecurity, with at least 3 years focused specifically on NIST SP 800-171 compliance and implementation
• Demonstrated experience configuring and securing Google Workspace in a regulated environment, including compliance controls across Drive, Gmail, and endpoint management
• Proven ability to conduct technical self-assessments
• Comfortable acting as an auditor, testing controls, and gathering evidence without supervision
• Deep understanding of DFARS 252.204-7012/7019/7020, NIST SP 800-171, and CMMC Level 2 assessment guides