IT Cybersecurity Engineer - NIST/CMMC & OT Security

Vulcan Elements Inc.; Benson (NC); On-site; USD 110,000 - 150,000; Full time

Job summary

Vulcan Elements Inc. is seeking an IT Cybersecurity Engineer to join our hands-on security team in a manufacturing environment focused on national security and resilience.

You will deploy and operate core security tools, enforce identity controls, and drive remediation across IT systems. Responsibilities include vulnerability management, incident response, and contributing to NIST SP 800-53/171/ CMMC programs while coordinating with our compliance partner.

Qualifications

• 3+ years of hands-on IT security engineering experience (security operations, security engineering, or systems administration with a strong security focus).
• Strong knowledge of Azure Active Directory/Entra ID and Windows/endpoint security hardening.
• Working knowledge of NIST SP 800-53 and/or NIST SP 800-171/CMMC; must be a U.S. Person due to access to U.S. export-controlled information or facilities.

Responsibilities

• Deploy, configure, and operate core security tooling including SIEM, endpoint detection and response (EDR), vulnerability scanning, and email/web security controls.
• Administer and harden identity systems (Active Directory/Entra ID), and enforce MFA, least-privilege access, just-in-time access, and Conditional Access policies across IT systems.
• Run regular vulnerability scans, prioritize findings, and drive remediation with system owners; track exceptions and compensating controls.
• Monitor security alerts, investigate and triage incidents, and lead or support incident response and root cause analysis for IT systems.
• Support the assessment of IT controls against the NIST SP 800-53 Low-Impact Baseline, help build and maintain the System Security Plan (SSP), and contribute to the Plan of Action and Milestones (POA&M).
• Coordinate with our external CMMC compliance partner to keep IT security controls consistent across NIST SP 800-171 (CMMC Level 2) and NIST SP 800-53, avoiding duplicate or conflicting work.
• Own patch management and secure configuration baselines for servers, endpoints, and network devices.
• Provide security review and input on new IT systems, applications, and vendor tools before they go into production.
• Maintain security procedures, playbooks, network/data flow diagrams, and audit evidence.
• Support delivery of security awareness training to personnel with access to CUI or other sensitive systems.
• Partner with Automation, Engineering, and OT teams to build security into new production lines and control system upgrades from the start.

Skills

Azure Active Directory/Entra ID

Windows/endpoint security hardening

NIST SP 800-53 / 800-171 / CMMC

Job description

Vulcan Elements Inc. is seeking an IT Cybersecurity Engineer to join our hands-on security team in a manufacturing environment focused on national security and resilience.

You will deploy and operate core security tools, enforce identity controls, and drive remediation across IT systems. Responsibilities include vulnerability management, incident response, and contributing to NIST SP 800-53/171/ CMMC programs while coordinating with our compliance partner.