Cyber Security Specialist

The Armor Group, Inc.; Mason (OH); On-site; USD 90,000 - 130,000; Full time

Job summary

The Armor Group, Inc. in Mason, OH seeks a Cybersecurity Specialist to design, implement, and maintain our IT cybersecurity program per NIST SP 800-171 and CMMC. You will own day-to-day security for on-prem and M365, translate complex security needs for non-technical staff, and partner with Compliance on regulatory frameworks.

This hands-on role requires strong communication, a detail-oriented mindset, and collaboration with the Compliance Manager to meet audit readiness and protect IT assets.

Qualifications

• Experience implementing or assessing against NIST SP 800-171 controls.
• 3-5+ years of hands-on IT security or systems administration experience.
• Proven experience administering Microsoft 365 security features in a production environment.
• Familiarity with firewall administration.
• Experience with CMMC compliance, gap assessments, or C3PAO assessments preferred.

Responsibilities

• Support, update, and maintain SSP, POA&M, and all governing compliance docs with Compliance Manager.
• Recommend and design compliance frameworks, enclaves, hardware, and software to meet requirements.
• Conduct gap assessments against NIST SP 800-171 controls and CMMC Level 2 practices.
• Lead remediation efforts for control gaps with IT and vendors.
• Prepare the organization for third-party CMMC assessments (C3PAO); act as IT point of contact.
• Maintain CUI scope definition, data flow diagrams, and assessment boundary docs with Compliance Manager.
• Administer and harden on-prem Active Directory, DNS, DHCP, and file servers per CIS/DISA baselines.
• Configure and manage firewalls, VLANs, and network segmentation to isolate CUI environments.
• Manage endpoint protection across on-prem workstations and servers.
• Oversee patch management for OS, firmware, and third-party apps.
• Implement and monitor MFA for all users and privileged accounts.
• Control and audit use of removable media and portable storage devices.
• Administer Microsoft 365 security posture including Exchange Online, SharePoint Online, OneDrive, Teams.
• Configure and manage Antivirus and EDR products.
• Implement and enforce Microsoft Purview Information Protection policies including CUI labeling, DLP, and retention.
• Manage Conditional Access, Entra ID, and Privileged Identity Management.
• Configure and maintain Microsoft Secure Score benchmarks and remediate gaps on schedule.
• Administer Microsoft Intune for MDM and MAM.
• Monitor security event logs, SIEM alerts, and threat intelligence feeds.
• Lead investigation and response to security incidents with DFARS 252.204-7012 reporting.
• Conduct periodic vulnerability scans and penetration test coordination; track and remediate findings.
• Perform user access reviews; enforce least privilege and separation of duties.
• Manage and review privileged account activity and admin access logs.

Skills

Attention to Detail

Communication

Ownership Mentality

Discretion

Collaboration

Education

Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field

Equivalent combination of education and directly relevant experience will be considered

Certified CCMC Professional (CCP) Preferred

Tools

GCC High

Preveil

SecureFrame

Quick Track solutions

Firewall administration

Job description

The Cybersecurity Specialist is responsible for designing, implementing, and maintaining the organization's IT cybersecurity program in alignment with NIST SP 800-171, Cybersecurity Maturity Model Certification (CMMC) IT requirements, and applicable federal regulations. This role owns the day-to-day security posture of on-premises infrastructure and Microsoft 365 (M365) environments, IT security best practices, supports audit readiness, and serves as the internal subject-matter expert for all matters related to the protection of IT assets.

This is a hands-on technical role that also requires strong communication skills — the Specialist must translate complex security requirements into actionable guidance for non-technical staff and effectively partner with the compliance manager on CMMC and NIST regulatory frameworks.

Responsibilities include:

• oSupport, update, and maintain the organization’s System Security Plan (SSP), Plan of Action & Milestones (POA&M), and all supporting compliance documentation relating to IT systems in coordination with the Compliance Manager.
• oRecommend, architect, and design the necessary compliance frameworks, enclaves, hardware, and software required to meet compliance requirements.
• oConduct and track gap assessments against NIST SP 800-171 controls and CMMC Level 2 practice requirements
• oLead remediation efforts for identified control gaps, coordinating with IT staff, management, and third-party vendors as needed
• oPrepare the organization for third-party CMMC assessments (C3PAO); serve as the primary IT point of contact during assessment activities
• oMaintain and update the CUI scope definition, data flow diagrams, and assessment boundary documentation based on organizational flow down information in coordination with the Compliance Manager.
• oAdminister and harden on-premises Active Directory (AD), DNS, DHCP, and file server environments in accordance with security baselines (CIS Benchmarks, DISA STIGs)
• oConfigure and manage firewalls, VLANs, and network segmentation controls to isolate CUI environments
• oManage endpoint protection platforms (EPP/EDR) across all on-premises workstations and servers
• oOversee patch management programs for operating systems, firmware, and third-party applications
• oImplement and monitor multi-factor authentication (MFA) for all user and privileged accounts
• oControl and audit use of removable media and portable storage devices
• oAdminister and harden the Microsoft 365 security posture including Exchange Online, SharePoint Online, OneDrive for Business, and Microsoft Teams
• oConfigure and manage Antivirus and EDR products
• oImplement and enforce Microsoft Purview Information Protection policies including CUI labeling to prevent data CUI data from entering commercial environments, data loss prevention (DLP), and retention policies
• oManage Conditional Access policies, Entra ID (Azure AD) security settings, and Privileged Identity Management (PIM)
• oConfigure and maintain Microsoft Secure Score benchmarks; remediate identified gaps on a defined schedule
• oAdminister Microsoft Intune for mobile device management (MDM) and mobile application management (MAM)
• Monitoring and Incident Response
• oMonitor security event logs, SIEM alerts, and threat intelligence feeds on an ongoing basis
• oLead investigation and response to security incidents; document findings and corrective actions in accordance with DFARS 252.204-7012 reporting requirements
• oConduct periodic vulnerability scans and penetration test coordination; track and remediate findings
• oPerform user access reviews on a defined schedule; enforce least privilege and separation of duties
• oManage and review privileged account activity and administrator access logs

PRINCIPAL CONTACTS INSIDE/OUTSIDE THE COMPANY

This position interacts with a wide variety of Armor office employees and senior management.

COMPETENCY OR POSITION REQUIREMENTS

• Attention to Detail - CMMC and NIST documentation must be precise and audit-ready
• Communication - Ability to explain security requirements clearly to non-technical staff
• Ownership Mentality - Takes initiative on compliance gaps without waiting to be directed
• Discretion - Regularly handles sensitive data and must maintain strict confidentiality
• Collaboration - Works cross-functionally with compliance and operations teams

EDUCATION

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field
• Equivalent combination of education and directly relevant experience will be considered

EXPERIENCE

• Familiarity with Zero Trust Architecture principles and implementation
• 3-5+ years of hands-on experience in an IT security or systems administration role
• Proven experience administering Microsoft 365 security features in a production environment
• Familiarity with firewall administration
• Demonstrated experience implementing or assessing against NIST SP 800-171 controls
• Experience with CMMC compliance, gap assessments, or C3PAO assessments preferred
• Experience with GCC High, Preveil, SecureFrame, Quick Track solutions a plus

EXPERIENCE

• Certified CCMC Professional (CCP) Preferred

WORKING AND PHYSICAL CONDITIONS

• Primarily office-based
• Will be required to work outside of normal business hours for incident response or maintenance windows
• Ability to sit for extended periods and work at a computer workstation
• Occasional lifting of IT equipment (up to 40 lbs.)