CMMC Level 2 Cybersecurity Administrator

QED Systems Inc; Virginia Beach (VA); On-site; USD 55,000 - 76,000; Full time

Benefits offered by this job

Competitive benefits package

Employee Assistance Program

Job summary

Q.E.D. Systems Inc seeks a Cybersecurity Administrator to implement and maintain security controls for CMMC Level 2, aligned with NIST SP 800-171 across the enterprise. You will help sustain CUI protection, maintain SSP/POA&M, and support assessment readiness with DOD-related authorities.

Responsibilities include boundary defense, cloud security, vulnerability scanning, patch compliance, and risk assessments; prior DoD/FedRAMP exposure is a plus.

Qualifications

• Experience implementing controls to meet NIST SP 800-171 requirements.
• Experience designing and maintaining a System Security Plan (SSP).
• Experience performing security audits with and without SIEM tools.
• Experience certifying or validating compliance of information systems.
• Current certification compatible with IAT Level III (DoD 8140) or ability to obtain within 6 months.

Responsibilities

• Plan, develop, implement, test, and document security controls to meet NIST SP 800-171 requirements.
• Develop and enforce information security policy.
• Perform IT risk and security assessments and support risk mitigation.
• Assess DFARS flow-down to subcontractors and support vendor risk reviews.
• Develop, update, and maintain SSP and risk analyses.
• Oversee and provide technical guidance to Cybersecurity Analysts.

Skills

NIST SP 800-171

SSP development

Vulnerability management

DLP policies

Cloud security

SIEM tools

CMMC Level 2

DoD 8140 / IAT III

Education

Bachelor’s degree in CS/IT/related field

Master’s degree in related field (optional)

Tools

MS Purview

Data Loss Prevention (DLP) tools

Job description

Q.E.D. Systems Inc seeks a Cybersecurity Administrator to implement and maintain security controls for CMMC Level 2, aligned with NIST SP 800-171 across the enterprise. You will help sustain CUI protection, maintain SSP/POA&M, and support assessment readiness with DOD-related authorities.

Responsibilities include boundary defense, cloud security, vulnerability scanning, patch compliance, and risk assessments; prior DoD/FedRAMP exposure is a plus.