We are seeking a Cyber Security Engineer with a strong security focus to support our CMMC Level 2 certification effort under DFARS. The right candidate will own assigned NIST SP 800-171 control domains, drive Microsoft security platform operations, and help protect a hybrid environment spanning on-premises infrastructure and cloud services including Azure, Defender, Sentinel, and Hyper-V.
This position is a US based (Orlando, FL), and is an in-office role (no hybrid or remote).
Essential Job Functions:
CMMC Level 2 / Cybersecurity Compliance
- Support CUI / FCI scoping activities, including identifying systems, users, data flows, enclaves, cloud services, endpoints, and third-party services in scope for CMMC Level 2.
- Maintain assessment-ready evidence mapped to NIST SP 800-171 control domains and CMMC assessment requirements in the System Security Plan (SSP).
- Identify, track, and remediate gaps via the Plan of Action & Milestones (POA&M).
- Support C3PAO third-party assessment preparation; build and maintain assessment-ready evidence packages including screenshots, configuration exports, policy references, ticket records, vulnerability scan results, audit logs, training records, and control implementation narratives.
- Maintain audit logging, log integrity, and SIEM operations.
- Conduct periodic vulnerability scans and coordinate remediation with the team.
- Assist in developing and enforcing security policies, procedures, and user awareness training.
- Ensure security-relevant changes are documented, approved, tested, and traceable through the ITSM or change management process.
Microsoft Security Platform Operations
- Administer and tune Microsoft Sentinel — build and maintain analytics rules, workbooks, and incident response playbooks.
- Manage Microsoft Defender for Endpoint, Identity, and Office 365 — configure policies, investigate alerts, and drive remediation.
- Maintain Azure security posture including Entra ID (Azure AD), Conditional Access, PIM, and role-based access controls.
- Support and manage Hyper-V virtualization environments including VM provisioning, snapshots, and performance monitoring.
- Leverage Microsoft Purview for data classification, sensitivity labeling, and compliance reporting.
Infrastructure & Systems Administration
- Administer and harden Windows Server, Active Directory, and Group Policy environments.
- Maintain network security posture including firewall rules, VLANs, and access control configurations.
- Maintain asset inventory, software inventory, secure configuration baselines, and change control evidence for servers, endpoints, network devices, cloud services, and security tools.
- Support endpoint management and patch compliance using enterprise ITSM and endpoint management tooling.
- Provide Tier 2/3 escalation support for security-relevant endpoint, identity, access, and infrastructure issues.
- Support ERP and line-of-business application integrations from an IT infrastructure and security perspective as needed.
Security Operations
- Monitor security alerts across Microsoft Sentinel and Defender, investigate incidents, and escalate per defined IR procedures.
- Support DFARS 252.204-7012 cyber incident response obligations, including evidence preservation, incident documentation, escalation, and coordination with leadership and external partners.
- Manage privileged access, MFA enforcement, and identity governance across on-premises and cloud environments.
- Assist with endpoint detection and response (EDR) configuration and hardening baselines.
- Participate in tabletop exercises and contribute to business continuity and DR planning.
- Support backup, recovery, business continuity, and disaster recovery controls, including backup monitoring, restore testing, retention validation, and protection of backup data from unauthorized modification or deletion.
- Coordinate with external MSPs, CMMC consultants, C3PAOs, auditors, software vendors, and managed security providers to support remediation, evidence collection, and assessment readiness.