Cybersecurity Specialist

Hydroform USA, Inc; Carson (CA); On-site; USD 90,000 - 130,000; Full time

Job summary

Hydroform USA, Inc. in Carson, CA is seeking a Cyber Security Specialist to join its IT team in an onsite role. You will support the company’s cybersecurity operations, CMMC Level 2 compliance program, and DoD cyber incident reporting.

The role requires strong experience with Windows Server and M365, SIEM monitoring, and vulnerability remediation, with responsibility for maintaining SSP/IRP/DRP documentation and DoD reporting timelines.

Qualifications

• 5+ years in cybersecurity/information assurance.
• Bachelor’s degree required; DoD 8140-aligned certification a plus.
• Experience with SIEM, vulnerability scanning/remediation, and NIST SP 800-171/CMMC Level 2 is preferred.

Responsibilities

• Run diagnostics, monitor SIEM/logging data, and identify system vulnerabilities.
• Build, configure, and maintain firewalls, antivirus, and endpoint security.
• Apply security patches and remediate vulnerabilities across systems.
• Assist with SSP/IRP/DRP documentation and DoD reporting requirements.
• Respond to and report cyber incidents to DoD within required timelines.
• Write reports on diagnostic findings and incident events.
• Test defensive capabilities and participate in tabletop exercises.

Skills

Cybersecurity

SIEM

Vulnerability Mgmt

Incident Response

Windows Admin

Documentation

Communication

Education

Bachelor's degree

DoD 8140-aligned certs (e.g., CISSP)

Tools

Metasploit

Windows Server

Microsoft 365

Entra ID

Active Directory

PIEE

Job description

Job Summary

Hydroform USA, a defense industrial base contractor based in Carson, CA, is seeking a Cyber Security Specialist to join its IT team in an onsite role. Reporting to the IT Manager, this role supports the company’s cybersecurity operations, CMMC Level 2 compliance program, and DoD cyber incident reporting.

Responsibilities

• Run diagnostics, monitor SIEM/logging data, and identify system vulnerabilities
• Build, configure, and maintain firewalls, antivirus, and endpoint security
• Apply security patches and remediate vulnerabilities across systems
• Assist the IT Manager in validating and maintaining controls outlined in the company’s System Security Plan (SSP), Incident Response Plan (IRP), Disaster Recovery Plan (DRP), and other CMMC Level 2 / NIST SP 800-171 documentation
• Respond to and report cyber incidents to DoD via DIBNet within 72 hours, accessed through the DoD’s Procurement Integrated Enterprise Environment (PIEE), per DFARS 252.204-7012
• Write reports on diagnostic findings and incident events
• Test technical defenses and Blue Team (defender) detection capabilities
• Facilitate tabletop exercises to test the incident response plan and crisis communication procedures
• Obtain and maintain PIEE access required to support DFARS cyber incident reporting processes

Experience

• 5+ years in cybersecurity/information assurance, including 3+ years administering Windows Server, Microsoft 365, Entra ID, Active Directory, and endpoint management platforms
• Bachelor’s degree in a related field
• Security+, SSCP, CySA+, CISSP , PenTest+, or SecurityX or equivalent DoD 8140-aligned cybersecurity certification a plus
• Experience with SIEM, Metasploit, audit logging, vulnerability scanning/remediation, IAVM
• Experience with security documentation (SSPs, IRPs); CMMC Level 2 / NIST SP 800-171 experience preferred
• Experience tracking Plans of Action &Ms
• Assist with maintenance of SPRS submissions, assessment artifacts, and supporting compliance evidence
• Experience securing systems that process, store, or transmit Controlled Unclassified Information (CUI)
• Gather and maintain technical evidence supporting NIST SP 800-171 and CMMC Level 2 compliance
• DoD or DoD subcontractor IT environment experience desired
• Strong written/oral communication and analytical skills
• US citizenship required

Join us to be part of a forward-thinking team dedicated to protecting vital information assets through innovative cybersecurity practices!