CMMC Security Engineer
At a glance
Mid-level Security Engineering role at Red Cup IT, Inc. Remote, United States · full-time · no salary stated · we estimate $155,000–$200,000.
Red Cup IT, Inc. has not published a salary for this role. The figure below is our estimate, not theirs.
remoteroles summary, based on the employer's posting.
What you'll do
- Build and monitor CMMC-aligned safeguards, including access restrictions, encryption, endpoint defenses and secure configurations
- Run vulnerability reviews, track fixes and manage ongoing risk across cloud and hybrid systems
- Help investigate security events through incident response, threat hunting and forensic analysis
- Prepare assessment materials, keep SSP and POA&M records current, and resolve audit findings
- Coordinate with compliance, legal and operations teams on NIST SP 800-171 and DFARS controls
What you bring
- A strong working grasp of CMMC 2.0, NIST SP 800-171 and DFARS requirements
- Hands-on experience with technical assessments, vulnerability management and FedRAMP Moderate or equivalent CUI systems
- Clear documentation skills for security policies, procedures and audit evidence
- A bachelor’s degree in information security, computer science or a related discipline
Who this fits
This mid-level remote role suits someone focused on CMMC compliance and protecting CUI, with experience supporting technical security work and assessments. You’ll need to explain technical findings to both technical and non-technical audiences.
From the employer
We are looking for a CMMC Security Engineer is responsible for implementing, maintaining, and leading cybersecurity efforts to ensure compliance with the Cybersecurity Maturity Model Certification (CMMC) standards, focusing on protecting Controlled Unclassified Information (CUI) for organizations in the Defense Industrial Base (DIB).
Key Responsibilities
- Design, implement, and monitor security controls aligned with CMMC requirements, including access controls, encryption, endpoint protection, and secure configurations.
- Lead vulnerability assessments, scan remediation tracking, and continuous risk management across hybrid and cloud environments.
- Support incident response, threat hunting, and forensic analysis for cybersecurity events.
- Prepare for and facilitate CMMC assessments (self and third-party), maintain certification documentation (SSP, POA&M), and address audit findings.
- Collaborate with compliance managers, legal/data protection officers, and operations teams to ensure continuous alignment with NIST SP 800-171/DFARS controls.
- Oversee CMMC continuous monitoring programs and identify compliance gaps in workflows.
- Provide security awareness training and promote a culture of cybersecurity vigilance across departments.
Required Skills
- Deep understanding of CMMC 2.0 framework, NIST SP 800-171, and DFARS requirements.
- Experience conducting technical assessments, vulnerability management, and implementing FedRAMP Moderate or equivalent systems for CUI.
- Strong documentation skills for policies, procedures, and audit support.
- Ability to communicate technical findings to both technical and non-technical stakeholders.
- Knowledge of cloud (e.g., Azure, Microsoft 365) and on-premise security technologies.
Typical Qualifications
- Bachelor’s degree in Information Security, Computer Science, or a related field.
- Professional certifications such as CISSP, CISM, GIAC, or CCA/CCP (CMMC-specific certifications preferred).
- Experience supporting DoD compliance or federal contracts is highly valued.
Job Purpose
The role ensures a secure and compliant enclave for CUI, mitigates cybersecurity risks, leads compliance projects, and prepares for third-party assessments and audits under the evolving CMMC 2.0 regulations.
Security Engineering work from LinkedIn, X, Reddit and Upwork, in one list.
Each morning you get everything that fits, strongest first.
Security EngineeringRemote
Find me workBy the team behind remoteroles.