Onsite Security Engineer: NIST/CMMC & Incident Response

Alexander Technology Group; Biddeford (ME); On-site; USD 85,000 - 110,000; Full time

Job summary

Alexander Technology Group is seeking a Cyber Security Engineer to support a client in the Southern Maine region. The role is onsite, with no remote work option.

The engineer will develop, implement, and maintain cybersecurity policies and controls aligned with NIST and CMMC, perform risk assessments and vulnerability scans, and coordinate incident response with IT teams. A 3–5+ year track record in cybersecurity and hands-on NIST/CMMC experience are required.

Qualifications

• Bachelor's degree in Cybersecurity, Information Systems, Computer Science, or equivalent professional experience.
• 3–5+ years of experience in a cybersecurity or information security role.
• Experience with NIST and CMMC compliance frameworks.
• Knowledge of security assessment tools, vulnerability management, and risk assessment methodologies.

Responsibilities

• Develop, implement, and maintain cybersecurity policies, procedures, and controls aligned with NIST and CMMC requirements.
• Perform security assessments, vulnerability scans, audits, and risk analyses to identify and mitigate security risks.
• Monitor, investigate, and respond to cybersecurity incidents, ensuring timely remediation and documentation.
• Partner with IT and cross-functional teams to maintain secure infrastructure and system integrations.

Skills

3–5+ years experience

NIST knowledge

CMMC knowledge

Security assessment tools

Incident response

Education

Bachelor's degree in Cybersecurity, Information Systems, Computer Science

Tools

Vulnerability assessment tools

SIEM

Job description

Alexander Technology Group is seeking a Cyber Security Engineer to support a client in the Southern Maine region. The role is onsite, with no remote work option.

The engineer will develop, implement, and maintain cybersecurity policies and controls aligned with NIST and CMMC, perform risk assessments and vulnerability scans, and coordinate incident response with IT teams. A 3–5+ year track record in cybersecurity and hands-on NIST/CMMC experience are required.