CMMC Security Engineer

Visa Hunt; United States; On-site; USD 120,000 - 190,000; Full time

Job summary

Visa Hunt is seeking a CMMC Security Engineer to implement, maintain, and lead cybersecurity efforts to ensure CMMC compliance and protect CUI for organizations in the Defense Industrial Base.

You will design and monitor security controls, lead vulnerability assessments, support incident response, and coordinate with compliance, legal, and operations to align with NIST SP 800-171/DFARS. This role also prepares for and facilitates assessments and audits.

Qualifications

• Bachelor’s degree in Information Security, CS, or related field.
• Certifications such as CISSP, CISM, GIAC, or CMMC-specific preferred.
• Experience supporting DoD/federal contracts is valued.
• Ability to document policies, procedures, and audit support.

Responsibilities

• Design, implement, and monitor security controls aligned with CMMC requirements.
• Lead vulnerability assessments and remediation tracking across hybrid/cloud environments.
• Support incident response, threat hunting, and forensic analysis.
• Prepare for and facilitate CMMC assessments and maintain SSP/POA&M.
• Collaborate with compliance, legal, and operations to align with NIST SP 800-171/DFARS.

Skills

CMMC 2.0

NIST SP 800-171

DFARS

Vulnerability assessments

Incident response

Security documentation

Communication with stakeholders

Cloud security (Azure/M365)

Education

Bachelor’s degree in Information Security, Computer Science, or a related field

CISSP

CISM

GIAC

CCA/CCP (CMMC-specific certifications preferred)

Tools

Azure

Microsoft 365

SIEM

Forensic analysis tools

Job description

We are looking for a CMMC Security Engineer is responsible for implementing, maintaining, and leading cybersecurity efforts to ensure compliance with the Cybersecurity Maturity Model Certification (CMMC) standards, focusing on protecting Controlled Unclassified Information (CUI) for organizations in the Defense Industrial Base (DIB).

Key Responsibilities

• Design, implement, and monitor security controls aligned with CMMC requirements, including access controls, encryption, endpoint protection, and secure configurations.
• Lead vulnerability assessments, scan remediation tracking, and continuous risk management across hybrid and cloud environments.
• Support incident response, threat hunting, and forensic analysis for cybersecurity events.
• Prepare for and facilitate CMMC assessments (self and third-party), maintain certification documentation (SSP, POA&M), and address audit findings.
• Collaborate with compliance managers, legal/data protection officers, and operations teams to ensure continuous alignment with NIST SP 800-171/DFARS controls.
• Oversee CMMC continuous monitoring programs and identify compliance gaps in workflows.
• Provide security awareness training and promote a culture of cybersecurity vigilance across departments.

Required Skills

• Deep understanding of CMMC 2.0 framework, NIST SP 800-171, and DFARS requirements.
• Experience conducting technical assessments, vulnerability management, and implementing FedRAMP Moderate or equivalent systems for CUI.
• Strong documentation skills for policies, procedures, and audit support.
• Ability to communicate technical findings to both technical and non-technical stakeholders.
• Knowledge of cloud (e.g., Azure, Microsoft 365) and on-premise security technologies.

Typical Qualifications

• Bachelor’s degree in Information Security, Computer Science, or a related field.
• Professional certifications such as CISSP, CISM, GIAC, or CCA/CCP (CMMC-specific certifications preferred).
• Experience supporting DoD compliance or federal contracts is highly valued.

Job Purpose

The role ensures a secure and compliant enclave for CUI, mitigates cybersecurity risks, leads compliance projects, and prepares for third-party assessments and audits under the evolving CMMC 2.0 regulations.