Cybersecurity Engineer

ComTec Solutions, LLC.; City of Rochester (NY); Hybrid; USD 100,000 - 150,000; Full time

Job summary

ComTec Solutions, LLC. is seeking a Cybersecurity Engineer to act as a subject matter expert across security domains. You will influence policies, standards, and architecture, while delivering Cybersecurity offerings and CMMC compliance projects for clients.

The role combines technical leadership with hands-on assessment, risk reviews, and collaboration with vendors and stakeholders to embed strong security controls into solutions and enterprise initiatives.

Qualifications

• 5+ years in Information Technology.
• 2+ years in Cybersecurity.
• 1 year in CMMC compliance.
• CISSP/CISM/CISA/ISSAP certifications a plus.
• Certified CMMC Professional (CCP).
• Familiarity with NIST SP 800-171, or 800-53.
• Vulnerability management experience.

Responsibilities

• Lead security design during project initiation and design stages.
• Conduct security reviews of complex applications and technologies.
• Perform security risk assessments and document findings.
• Coordinate with cybersecurity vendors.
• Monitor cybersecurity reports and drive improvements.
• Ensure alignment with NIST and CMMC requirements.

Skills

Security architecture

Network security

Cloud technologies

Windows Server

Virtualization

EDR/MDR

Office 365

Hyper-V

VMware

CMMC

NIST SP 800-171

Vulnerability management

Education

CISSP/CISM/CISA/ISSAP

Certified CMMC Professional (CCP)

NIST SP 800-171 familiarity

Job description

Job Type

Full-time

Description

Billable Hours: 80% of worked hours

Travel: Minimal

The Cybersecurity Engineer to serve as a subject matter expert in many areas of security, able to describe and document in business terms the impact of security policies, standards, and architecture. This person plays a vital dual role in our organization, with time being spent facilitating our Cybersecurity offering as well as focusing on CMMC Compliance. The Cybersecurity Engineer provides security direction to the business and project stakeholders to ensure that security is a key focus for all projects and new business initiatives, as well as technical expertise on assigned clients, tickets, and CMMC Compliance projects.

ESSENTIAL FUNCTIONS:

• Project engagement during the initiation, requirements, and design stages to ensure that security has been considered and is included into the design at the appropriate level based on the risks
• Security review and design of complex applications and technologies
• Evaluation and maintenance of security system plans and procedures to safeguard internal information systems
• Researching and recommendation/implementation of changes to procedures and systems to enhance security aligned with corporate policies
• Accountable for ensuring that key risks and issues are identified, addressed and resolved in a manner that satisfies the business
• Perform security risk assessments to determine level of security services to include:
• Liaison between ComTec and Cybersecurity Vendors
• Weekly review and analysis of Cybersecurity Reports

ADDITIONAL RESPONSIBILITIES:

• Monitor assigned tickets and tasks and provide service or escalation as necessary.
• Develop tasks & milestones for security projects.
• Able to translate business and non-functional requirements to establish security controls so that a proper security design can be architected and to document the security solution for communication and publication.
• Demonstrated analytical skills – continuously identifies problems, collect or interpret data, establish facts, anticipate obstacles, and develops plans to resolve; strong problem-solving skills while communicating in a clear and succinct manner effectively evaluating information and data to make decisions.
• Proven understanding of the current vulnerabilities, response, and mitigation strategies used in Cybersecurity.
• Experience of designing and incorporating technical security controls that align to NIST 800-171, and/or CMMC.
• Prepared to challenge business and IT colleagues and have the “difficult conversations” where needed in the interests of the company.
• Demonstrated customer focus – evaluate decisions through the eyes of the customer; build strong customer relationships and create processes from the customer viewpoint.
• Able to operate as a highly independent worker and as part of a strong team/collaborative approach.
• Accurately enter and maintain ticket information including notes and resolution.
• Adhere to departmental policies for reporting and managing requests and change controls.
• Maintain daily timesheet and expense report entries and submit them accurately and timely.
• Other duties as required.

Requirements

TECHNICAL SKILLS:

• Strong background in security architecture including a deep knowledge of IT network security (secure LAN, WAN, vLAN, MPLS, and secure network zoning and restricted network design) and cloud-based technologies.
• Strong background in Network Engineering including a deep understanding of Windows Server architecture, Windows Virtualization, Networking, Backup Solutions, and Disaster Recovery
• Strong background in Microsoft security architecture including a deep knowledge of server and workstation security.
• Ability to troubleshoot server based software issues with:
• Microsoft Windows Server operating systems
• On Premise Microsoft Exchange and hosted Microsoft Office 365
• Microsoft Remote Desktop Services
• Microsoft Hyper-V and VMWare
• Enterprise EDR and MDR solutions
• Enterprise class backup solutions
• Knowledgeable of various server/workstation peripherals such as NAS/SAN solutions.
• In depth knowledge of workstation/server hardware and software troubleshooting abilities
• Strong understanding of networking equipment such as Switches, Firewalls, and Wireless Access Points

SOFT SKILLS & ABILITIES:

• Strong written and verbal communication skills.
• Pleasant and professional demeanor in all client and internal communications.
• Ability to multi task.
• Independent worker and able to work effectively on daily tasks without direct supervision.
• Strong organization skills and ability to operate efficiently throughout daily tasks.
• Work well with clients at all levels, from executive to IT to end user.

EDUCATION, EXPERIENCE, & KNOWLEDGE:

• (5) years working in Information Technology
• (2) years in Cybersecurity
• (1) year in CMMC compliance
• Information Security Qualifications such as CISSP, CISM, CISA, and ISSAP, a plus.
• Certified CMMC Professional (CCP)
• Familiarity with NIST SP 800-171, or 800-53
• Vulnerability Management

ADDITIONAL REQUIREMENTS:

• Ability to schedule for evening or weekend work occasionally
• Valid driver’s license in your state of residence and reliable personal vehicle

WORK ENVIRONMENT/PHYSICAL DEMANDS:

• Use of computer and office equipment
• Ability to remain calm in stressful situations
• Performs all administrative functions expected at this level