IT Cybersecurity Engineer New Research Triangle Park, NC

Vulcan Elements Inc.; Northern (KY); Hybrid; USD 75,000 - 130,000; Full time

Job summary

Vulcan Elements Inc. is seeking an IT Cybersecurity Engineer to deploy, tune, and operate security tooling protecting our IT environment in a regulated manufacturing setting.

You will support NIST SP 800-53 Low-Impact Baseline assessments, POA&M efforts, and work with our compliance partner on CMMC Level 2 alignment. Strong hands-on security experience and knowledge of identity and endpoint hardening are essential.

Qualifications

• 3+ years hands-on IT security engineering experience.
• Strong knowledge of Azure Active Directory/Entra ID and Windows security hardening.
• Experience with NIST SP 800-53/171/CMMC and contribute to SSP/POA&M.

Responsibilities

• Deploy, configure, and operate core security tooling including SIEM, EDR, vulnerability scanning, and email/web security controls.
• Harden identity systems (Active Directory/Entra ID) and enforce MFA and least-privilege access.
• Run regular vulnerability scans, prioritize findings, and drive remediation with system owners; track exceptions and compensating controls.
• Monitor security alerts, investigate incidents, triage, and support incident response and root cause analysis.
• Support IT controls assessment against NIST SP 800-53 Low-Impact Baseline; build SSP and contribute to POA&M.
• Coordinate with external CMMC partner to align NIST SP 800-171 and NIST SP 800-53 controls.
• Own patch management and secure configuration baselines for servers, endpoints, and network devices.
• Provide security input on new IT systems and vendor tools before production.
• Maintain security procedures, playbooks, diagrams, and audit evidence.
• Support security awareness training for personnel with access to CUI or sensitive systems.
• Partner with Automation, Engineering, and OT teams to embed security in production lines.

Skills

Azure AD/Entra ID

Windows security

Incident response

Vulnerability management

MFA enforcement

Access control

Tools

SIEM

EDR

Vulnerability Scanning

Active Directory

Job description

Vulcan Elements is manufacturing American rare-earth permanent magnets for a secure, resilient future. With a focus on national security and economic resiliency, we serve critical industries such as defense, aerospace, and automotive powering a high-technology future. Vulcan Elements is building a team of ambitious professionals committed to Mission Focus, Technical Excellence and Integrity.

As an IT Cybersecurity Engineer, you will be a hands-on member of our security team, responsible for deploying, tuning, and operating the tools and controls that protect Vulcan Elements' IT environment. You will also support our NIST SP 800-53 (Low-Impact Baseline) assessment and Plan of Action and Milestones (POA&M, working alongside our external compliance partner and our existing NIST SP 800-171/CMMC program. This role is a strong fit for someone who wants to build and run real security tooling day to day while also gaining exposure to federal compliance frameworks in a regulated manufacturing environment.

Responsibilities

• Deploy, configure, and operate core security tooling including SIEM, endpoint detection and response (EDR), vulnerability scanning, and email/web security controls.
• Administer and harden identity systems (Active Directory/Entra ID), and enforce MFA, least-privilege access, just-in-time access, and Conditional Access policies across IT systems.
• Run regular vulnerability scans, prioritize findings, and drive remediation with system owners; track exceptions and compensating controls.
• Monitor security alerts, investigate and triage incidents, and lead or support incident response and root cause analysis for IT systems.
• Support the assessment of IT controls against the NIST SP 800-53 Low-Impact Baseline, help build and maintain the System Security Plan (SSP), and contribute to the Plan of Action and Milestones (POA&M).
• Coordinate with our external CMMC compliance partner to keep IT security controls consistent across NIST SP 800-171 (CMMC Level 2) and NIST SP 800-53, avoiding duplicate or conflicting work.
• Own patch management and secure configuration baselines for servers, endpoints, and network devices.
• Provide security review and input on new IT systems, applications, and vendor tools before they go into production.
• Maintain security procedures, playbooks, network/data flow diagrams, and audit evidence.
• Support delivery of security awareness training to personnel with access to CUI or other sensitive systems.
• Partner with Automation, Engineering, and OT teams to build security into new production lines and control system upgrades from the start.

Responsibilities and tasks outlined are not exhaustive and may change as determined by the needs of the business.

Qualifications

• 3+ years of hands-on IT security engineering experience (security operations, security engineering, or systems administration with a strong security focus).
• Strong knowledge of Azure Active Directory/Entra ID and Windows/endpoint security hardening.
• Working knowledge of NIST SP 800-53 and/or NIST SP 800-171/CMMC; experience contributing to a System Security Plan (SSP) or POA&M is a strong plus. Must be a U.S. Person due to required access to U.S. export-controlled information or facilities.

Desired Skills

• Working knowledge of ISA/IEC 62443, NIST SP 800-82, and NIST SP 800-53; experience contributing to an SSP or POA&M for OT systems is a strong plus.
• Prior experience in a defense contractor, federal contractor, or CHIPS/DoD-funded environment.
• CompTIA Security+, GSEC, CySA+, or similar; CCP (Certified CMMC Professional) a plus.

This position requires access to information and technology that is subject to US Export Control. Vulcan Elements will use this information to determine if you are eligible to receive this information under US Law.

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey.Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiringprocess or thereafter. Any information that you do provide will be recorded and maintained in aconfidential file.

As set forth in Vulcan Elements's Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection.As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measurethe effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categoriesis as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.