Cybersecurity Engineer (NIST/CMMC) for Regulated Manufacturing

Vulcan Elements Inc.; North Carolina; On-site; USD 90,000 - 130,000; Full time

Job summary

Vulcan Elements Inc. in the United States seeks an IT Cybersecurity Engineer to deploy and operate core security controls across our IT environment. You will support NIST SP 800-53 Low-Impact Baseline assessments and work with our compliance partners and CMMC program to strengthen defenses.

You will lead vulnerability management, identity protection, and incident response efforts, while partnering with OT and engineering teams to embed security into production lines and new systems.

Qualifications

• 3+ years of hands-on IT security engineering experience.
• Strong knowledge of Azure Active Directory/Entra ID and endpoint security.
• Familiar with NIST SP 800-53 and NIST SP 800-171/CMMC.

Responsibilities

• Deploy, configure, and operate core security tooling including SIEM, EDR, vulnerability scanning, and email/web security controls.
• Administer and harden identity systems (Active Directory/Entra ID), and enforce MFA, least-privilege access, just-in-time access, and Conditional Access policies across IT systems.
• Run regular vulnerability scans, prioritize findings, and drive remediation with system owners; track exceptions and compensating controls.
• Monitor security alerts, investigate and triage incidents, and lead or support incident response and root cause analysis for IT systems.
• Support the assessment of IT controls against the NIST SP 800-53 Low-Impact Baseline, help build and maintain the SSP, and contribute to POA&M.
• Coordinate with our external CMMC compliance partner to keep IT security controls consistent across NIST SP 800-171 and NIST SP 800-53.
• Own patch management and secure configuration baselines for servers, endpoints, and network devices.
• Provide security review and input on new IT systems, applications, and vendor tools before production.
• Maintain security procedures, playbooks, diagrams, and audit evidence.
• Support security awareness training to personnel with access to CUI or sensitive systems.
• Partner with Automation, Engineering, and OT teams to build security into production lines and control system upgrades.

Skills

Security engineering

Azure AD / Entra ID

NIST SP 800-53 / 800-171 / CMMC

Tools

SIEM

EDR

Vulnerability scanning

Active Directory / Entra ID

Job description

Vulcan Elements Inc. in the United States seeks an IT Cybersecurity Engineer to deploy and operate core security controls across our IT environment. You will support NIST SP 800-53 Low-Impact Baseline assessments and work with our compliance partners and CMMC program to strengthen defenses.

You will lead vulnerability management, identity protection, and incident response efforts, while partnering with OT and engineering teams to embed security into production lines and new systems.