Canopy Aerospace & Defense

Security Engineer

• Lead the implementation, assessment, and continuous improvement of security controls aligned with NIST SP 800-171 and CMMC 2.0, ensuring organizational readiness for Level 2 certification.
• Own and maintain the System Security Plan (SSP), Plans of Action and Milestones (POA&M), security policies, procedures, and compliance documentation.
• Map and protect Controlled Unclassified Information (CUI) throughout its lifecycle, including data flows across engineering design (CAD/CAM), procurement, quality, manufacturing, and external suppliers.
• Serve as the primary liaison for CMMC assessments, including coordination with C3PAOs, audit preparation, artifact management, and remediation tracking.
• Implement and monitor security controls across both IT and OT environments, including identity and access management, multi-factor authentication, encryption, endpoint detection and response (EDR), SIEM, firewalls, and network segmentation.
• Conduct vulnerability scanning, risk assessments, and gap analyses against NIST SP 800-171 controls, prioritizing mitigation efforts based on operational and contractual risk.
• Lead cyber incident response activities, including documentation and reporting of incidents impacting CUI within required DFARS timelines (e.g., 72-hour reporting).
• Partner cross-functionally with engineering, operations, quality, and leadership to embed cybersecurity into product development and manufacturing processes.
• Oversee relationships with managed service providers (MSPs), cloud providers, and external security vendors to ensure secure configurations and regulatory compliance.
• Develop and deliver practical cybersecurity training tailored to aerospace manufacturing personnel, including phishing awareness, secure technical data handling, and CUI best practices.
• Establish compliance dashboards and executive reporting mechanisms to provide visibility into security posture and remediation progress.
• Support and secure cloud environments, including Microsoft GCC High or Azure Government, where applicable.

Cyber Security Specialist, CMMC Compliance

Recruitment

• Support day-to-day recruiting activities across multiple open requisitions spanning multiple business units and geographic locations
• Post jobs, manage job descriptions, and assist with requisition setup in Lever ATS
• Source candidates using LinkedIn, job boards, referrals, and other recruiting tools across multiple markets and regions
• Conduct initial application screening to assess alignment with role requirements
• Schedule and coordinate interviews across multiple time zones and site locations
• Ensure a smooth, responsive, and professional candidate experience throughout the hiring process
• Maintain consistent communication with candidates and hiring teams across different locations
• Track candidate activity and maintain accurate documentation within Lever ATS
• Follow established recruiting workflows, interview stages, and compliance requirements
• Partner with hiring managers and senior recruiters across multiple business units to support pipeline development and hiring progress
• Assist in preparing candidate summaries and coordinating interview feedback
• Support offer process logistics, including scheduling and documentation
• Contribute to data accuracy, reporting, and audit readiness within the ATS
• Ensure all recruiting activities adhere to EEO, OFCCP, ITAR, and company compliance standards

Cyber Security Specialist, CMMC Compliance

Recruiting Coordinator

Cyber Security Specialist, CMMC Compliance