Cybersecurity Engineer – NIST 800-171 & CMMC Compliance Lead

Nooks; United States; Remote; USD 145,000 - 163,000; Full time

Benefits offered by this job

Medical, dental, vision

PTO

401(k)

Salary range transparency

Job summary

Nooks is seeking a Cybersecurity Engineer to own the unclassified environment's security posture, map controls to NIST SP 800-171 and CMMC Level 2, and produce evidence for audits. This hands-on role reports to the Cyber Compliance and Policy Manager and focuses on hardening, self‑assessments, and remediation across Google Workspace and Microsoft environments.

You will drive POA&M activities, maintain SSP, and ensure audit readiness while translating security requirements for non‑technical

Qualifications

• 5–8 years in cybersecurity with at least 3 years on NIST SP 800-171 compliance.
• Experience securing Google Workspace in regulated environments.
• Ability to conduct technical self‑assessments and internal audits.
• Deep understanding of DFARS 252.204‑7012/7019/7020, NIST SP 800‑171, and CMMC Level 2.
• Active DoD 8570/8140 IAM Level II or III certification (e.g., CISSP, CISM, CASP+).
• Strong ability to explain technical requirements to non‑technical leadership.

Responsibilities

• Own the unclassified environment's compliance posture and SSP.
• Track findings and manage POA&Ms to drive remediation.
• Generate and maintain SPRS scores and prep for third‑party assessments.
• Adhere to Change Management processes and the Change Control Board.
• Plan and execute self‑assessments of the unclassified network.
• Lead preparation for C3PAO assessments and compile evidence.
• Document controls for external auditors and translate requirements for leadership.
• Secure Google Workspace and Microsoft environments (AD, GPO) with proper SoD.
• Ensure DLP, access controls, and MDM meet CUI protection requirements.
• Collaborate with Enterprise IT and IT/Cyber Operations to remediate findings.

Skills

NIST SP 800-171

CMMC Level 2

DoD 8570 IAM Level II/III

Google Workspace security

Auditing / self-assessments

Policy & governance communication

Tools

Google Workspace Admin

Active Directory

Group Policy

GRC tools

Job description

Nooks is seeking a Cybersecurity Engineer to own the unclassified environment's security posture, map controls to NIST SP 800-171 and CMMC Level 2, and produce evidence for audits. This hands-on role reports to the Cyber Compliance and Policy Manager and focuses on hardening, self‑assessments, and remediation across Google Workspace and Microsoft environments.

You will drive POA&M activities, maintain SSP, and ensure audit readiness while translating security requirements for non‑technical