Cyber Security Engineer

Description: We are seeking a Cyber Security Engineer with a strong security focus to support our CMMC Level 2 certification effort under DFARS. The right candidate will own assigned NIST SP 800\-171 control domains, drive Microsoft security platform operations, and help protect a hybrid environment spanning on\-premises infrastructure and cloud services including Azure, Defender, Sentinel, and Hyper\-V. **Essential Job Functions:** ***CMMC Level 2 / Cybersecurity Compliance*** * Support CUI / FCI scoping activities, including identifying systems, users, data flows, enclaves, cloud services, endpoints, and third\-party services in scope for CMMC Level 2\. * Maintain assessment\-ready evidence mapped to NIST SP 800\-171 control domains and CMMC assessment requirements in the System Security Plan (SSP). * Identify, track, and remediate gaps via the Plan of Action \& Milestones (POA\&M). * Support C3PAO third\-party assessment preparation; build and maintain assessment\-ready evidence packages including screenshots, configuration exports, policy references, ticket records, vulnerability scan results, audit logs, training records, and control implementation narratives. * Maintain audit logging, log integrity, and SIEM operations. * Conduct periodic vulnerability scans and coordinate remediation with the team. * Assist in developing and enforcing security policies, procedures, and user awareness training. * Ensure security\-relevant changes are documented, approved, tested, and traceable through the ITSM or change management process. ***Microsoft Security Platform Operations*** * Administer and tune Microsoft Sentinel — build and maintain analytics rules, workbooks, and incident response playbooks. * Manage Microsoft Defender for Endpoint, Identity, and Office 365 — configure policies, investigate alerts, and drive remediation. * Maintain Azure security posture including Entra ID (Azure AD), Conditional Access, PIM, and role\-based access controls. * Support and ma