Audit-Ready NIST/CMMC Cybersecurity Engineer

Nooks; Colorado Springs (CO); Vor Ort; USD 145.000 - 163.000; Vollzeit

Benefits dieser Stelle

Base salary

Performance bonus

Equity

Medical, dental, vision

PTO

401(k)

Zusammenfassung

Nooks is building and operating secured, classified environments for the defense and national security community. This role owns the unclassified environment's security posture, aligning with NIST SP 800-171, CMMC Level 2, and ITAR data controls, while coordinating audits and evidence for external assessments.

As a hands-on contributor, you will drive self-assessments, document controls for leadership, and ensure secure configurations across Google Workspace and other enterprise platforms to

Qualifikationen

• U.S. citizenship required for accessing CUI/ITAR data.
• 5-8 years in cybersecurity with at least 3 years focused on NIST SP 800-171 compliance and implementation.
• Experience configuring and securing Google Workspace in a regulated environment.
• Proven ability to conduct technical self-assessments — auditing and evidence gathering without supervision.
• Deep understanding of DFARS 252.204-7012/7019/7020, NIST SP 800-171, and CMMC Level 2 assessment guides.

Aufgaben

• Own unclassified environment's compliance posture and maintain the SSP against NIST SP 800-171 and CMMC Level 2.
• Track findings, manage POA&Ms, and drive timely remediation.
• Generate and maintain SPRS scores and evidence for third-party assessments.
• Lead Change Management processes and ensure validated modifications before production.

Kenntnisse

US citizenship

Cybersecurity

NIST SP 800-171

CMMC Level 2

Google Workspace

DFARS compliance

IAM certifications

Self-audit

Security controls

Tools

EDR

SIEM

Jobbeschreibung

Nooks is building and operating secured, classified environments for the defense and national security community. This role owns the unclassified environment's security posture, aligning with NIST SP 800-171, CMMC Level 2, and ITAR data controls, while coordinating audits and evidence for external assessments.

As a hands-on contributor, you will drive self-assessments, document controls for leadership, and ensure secure configurations across Google Workspace and other enterprise platforms to