Associate Cybersecurity Specialist

Vulcan Elements; North Carolina; On-site; USD 65,000 - 90,000; Full time

Job summary

Vulcan Elements is actively seeking an Associate Cybersecurity Specialist to bolster the security and compliance posture of our converged OT and IT environments in a manufacturing setting. You will collaborate with our external CMMC partner to learn and implement NIST 800-171 controls and to maintain security documentation while gaining hands-on experience across both manufacturing and business systems.

We value curiosity, attention to detail, and a genuine interest in the intersection of

Qualifications

• 2+ years in IT cybersecurity or related role; internship or lab experience acceptable.
• Foundational understanding of cybersecurity concepts including access control, network security, logging, and incident response.
• Basic familiarity with NIST 800-171 or CMMC framework; knowledge of why they matter.

Responsibilities

• Support maintenance and continuous improvement of NIST 800-171 controls across IT and OT environments with external partner.
• Help keep System Security Plan (SSP) current; map controls to systems and personnel.
• Identify and document security risks across IT and OT, applying risk-based prioritization.
• Assist security controls across IT and OT including MES, historians, and network boundary devices.
• Monitor security events; assist in incident response and document findings.
• Coordinate vulnerability scanning and track remediation with system owners.
• Assist with security awareness training and evidence gathering for audits.

Skills

IT security

Documentation

Attention to detail

Willingness to learn

Tools

SIEM

Endpoint protection

Vulnerability scanners

Active Directory

Job description

Vulcan Elements is manufacturing American rare-earth permanent magnets for a secure, resilient future. With a focus on national security and economic resiliency, we serve critical industries such as defense, aerospace, and automotive powering a high-technology future. Vulcan Elements is building a team of ambitious professionals committed to Mission Focus, Technical Excellence and Transparency.

As an Associate Cybersecurity Specialist, you will support the security and compliance posture of our converged OT and IT environments. You will work alongside our external CMMC compliance partner to learn and implement NIST 800-171 controls, assist in maintaining security documentation, and develop hands‑on experience across both our manufacturing and business systems. We are looking for someone hungry to learn, detail-oriented, and genuinely interested in the intersection of industrial and IT security.

Responsibilities

• Support the maintenance and continuous improvement of NIST 800-171 controls across IT and OT environments working alongside our external CMMC compliance partner. Assist in tracking the Plan of Action and Milestones (POA&M) and help drive closure of open items.
• Assist in keeping the System Security Plan (SSP) current and accurate. Learn to map controls to actual systems, configurations, and personnel as you develop familiarity with the environment.
• Assist in identifying and documenting security risks across IT and OT systems. Learn to apply risk‑based prioritization that accounts for OT safety constraints and production impact.
• Support implementation and monitoring security controls across IT infrastructure and OT environments including MES, historians, and network boundary devices.
• Monitor security events across IT and OT environments. Investigate alerts under guidance, assist in incident response efforts, and document findings.
• Assist with vulnerability scanning across IT systems and help coordinate safe assessment approaches for OT assets. Track remediation items with system owners.
• Support delivery of security awareness training. Help ensure personnel with CUI access understand their responsibilities under CMMC policy.
• Support third‑party CMMC assessments and internal audits. Assist in gathering and organizing evidence of control implementation.

Responsibilities and tasks outlined are not exhaustive and may change as determined by the needs of the business.

Qualifications

• 2+ years in an IT, cybersecurity, or related technical role. Internship or lab experience considered. Manufacturing or industrial exposure is a plus but not required.
• Foundational understanding of cybersecurity concepts including access control, network security, logging, and incident response. Formal coursework, self‑study, or hands‑on lab experience accepted.
• Basic awareness of NIST 800-171 or CMMC framework. You do not need to have implemented controls, but you should know what they are and why they matter.
• Curiosity about how OT and IT systems work together. Willingness to learn IC…
• Comfortable working in Windows environments. Familiarity with Active Directory, networking basics, and security tooling (SIEM, endpoint protection, vulnerability scanners) a plus.
• Strong attention to detail and ability to maintain accurate documentation. Security compliance lives and dies on good records.
• Prior exposure to DoD, federal contracting, or CUI handling environments a plus.
• Ability to work in a manufacturing environment. Occasional physical work in production or server areas may be required.
• CompTIA Security+ required within 6 months of hire if not already held. CCP (Certified CMMC Professional) supported and expected within 12-18 months.

Must be a U.S. Person due to required access to U.S. export‑controlled information or facilities.