Cybersecurity Engineer

Nooks

. Own the unclassified environment’s compliance posture and maintain the System Security Plan against NIST SP 800-171 and CMMC Level 2 .

Posted 10/20/2026full-timeRemote • United StatesMid-LevelSenior💰 $145,000 - $163,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in NIST SP 800-171 compliance and CMMC Level 2 assessments, with a strong ability to manage security controls and document requirements for both technical and non-technical stakeholders. Proficient in securing Google Workspace and Microsoft environments while ensuring adherence to compliance standards and conducting thorough self-assessments.

Highest-signal resume keywords

NIST SP 800-171 ComplianceCMMC Level 2 AssessmentGoogle Workspace SecurityActive DoD 8570/8140 IAM Level II or III CertificationTechnical Self-Assessments

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

CybersecurityCompliance ManagementVulnerability ManagementChange ManagementAudit PreparationControl DocumentationConfiguration MonitoringEvidence GatheringRisk ReportingTechnical Assessment

Soft Skills

CommunicationLeadershipCollaborationProblem-SolvingDocumentation

Tools & Technologies

Google WorkspaceMicrosoft Active DirectoryGroup PolicyEDR ToolsSIEM Tools

Certifications & Qualifications

CISSPCISMCASP+CAPCMMC Certified ProfessionalGoogle Professional Cloud Security EngineerGoogle Professional Google Workspace Administrator

Industry Keywords

CUI RequirementsDFARS 252.204-7012/7019/7020POA&MsSPRS ScoresThird-Party AssessmentSecurity Control AssessorQSAChange Control Board

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Own the unclassified environment’s compliance posture and maintain the System Security Plan against NIST SP 800-171 and CMMC Level 2
Track findings and vulnerabilities and manage POA&Ms to drive remediation
Generate and maintain SPRS scores and identify gaps before third-party assessment
Adhere to Change Management processes and the Change Control Board, validating and testing infrastructure modifications before production
Plan and execute comprehensive self-assessments and act as internal auditor
Lead preparation for C3PAO assessments, compile evidence, interview technical staff, and maintain audit readiness
Document controls for external auditors and translate requirements for non-technical leadership
Secure and monitor Google Workspace and Microsoft environments, including Active Directory and Group Policy
Ensure Separation of Duties, secure remote access, DLP, access controls, and MDM meet CUI requirements
Monitor configuration drift against the CUI baseline
Evaluate new enterprise software and third-party vendors for compliance and security standards
Partner with Enterprise IT and IT/Cyber Operations to remediate findings
Provide evidence and technical answers to external C3PAO assessors and report posture and risk through Enterprise Cyber

Requirements

What you’ll need

U.S. citizenship
Authorized to work in the United States
5–8 years in cybersecurity, with at least 3 years focused specifically on NIST SP 800-171 compliance and implementation
Experience configuring and securing Google Workspace in a regulated environment, including compliance controls across Drive, Gmail, and endpoint management
Ability to conduct technical self-assessments, test controls, and gather evidence without supervision
Deep understanding of DFARS 252.204-7012/7019/7020, NIST SP 800-171, and CMMC Level 2 assessment guides
Active DoD 8570/8140 IAM Level II or III certification, such as CISSP, CISM, CASP+, or CAP
Ability to explain technical requirements to non-technical leadership and document controls clearly for external auditors
Preferred: CMMC Certified Professional (CCP) or Registered Practitioner (RP)
Preferred: Google Professional Cloud Security Engineer or Professional Google Workspace Administrator certification
Preferred: Active Secret or Top Secret clearance
Preferred: Experience as a formal security control assessor (SCA) or QSA
Preferred: Familiarity with EDR and SIEM tooling

Benefits

Comp & perks

Performance bonus
Equity
Medical insurance
Dental insurance
Vision insurance
PTO
401(k)