Systems Security Engineer

Responsibilities: Drive readiness and ongoing compliance for CMMC Level 2 and NIST SP 800-171 Support SOC 2 and PCI DSS initiatives including control design, evidence collection, remediation, and audit coordination Lead security and infrastructure projects from idea to implementation with timelines, stakeholders, vendors, risks, and deliverables Administer and improve security technologies across endpoint protection, IAM, SIEM, MFA, email security, vulnerability management, and logging Lead access reviews, security awareness efforts, phishing simulations, and incident-response tabletop exercises Develop security policies, procedures, and plans for compliance and validate their effectiveness in real-world use Partner with leadership on security risk, vendor reviews, customer requirements, and business decisions Collaborate with IT on Microsoft 365, Entra ID, servers, networking, endpoints, identity, and other infrastructure initiatives

Key requirements: Experience in security-focused engineering with ownership of security and compliance programs Knowledge of CMMC Level 2 and NIST SP 800-171, plus SOC 2 and PCI DSS Ability to manage security/infrastructure projects from concept to delivery Hands-on experience with endpoint protection, IAM, SIEM, MFA, email security, vulnerability management, and logging Strong collaboration with IT leadership and ability to communicate risk and recommendations Cross-functional collaboration Ownership mindset Risk communication Endpoint protection IAM (Identity and Access Management) SIEM