Security and Compliance Engineer – CMMC/NIST SP 800-171

Technical Support

Security and Compliance Engineer providing IT and cyber security services to clients. Focusing on network security operations, assessments, and developing security policies.

Posted 7/28/2026full-timeRemote • Massachusetts • 🇺🇸 United StatesMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Cyber Security, including risk assessment, compliance frameworks, and incident response. Proficient in developing security policies and conducting security awareness training to ensure organizational compliance and security best practices.

Highest-signal resume keywords

Cyber Security Information ExperienceCertified Information Systems Security Professional (CISSP)NIST SP 800-171 ComplianceEndpoint Security SolutionsSecurity Risk Assessment

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Risk AssessmentSecurity Policy DevelopmentIncident ResponseVulnerability ManagementNetwork Diagram CreationSecurity Control MonitoringCompliance FrameworksData Loss PreventionFile Integrity MonitoringSecurity Awareness Training

Soft Skills

Client ConsultationDocumentation SkillsCommunication SkillsAnalytical ThinkingProblem Solving

Tools & Technologies

Windows 10/11Windows Server 2016/2019MacOSLinuxSecurity Compliance Tools

Certifications & Qualifications

Certified Information Systems Auditor (CISA)Certified Information Security Manager (CISM)Information Systems Security Architecture Professional (ISSAP)Information Systems Security Engineering Professional (ISSEP)

Industry Keywords

Cyber Security ComplianceNIST SP 800-171PCI DSS v3.2CIS ControlsSecurity Best Practices

Tech Stack

Tools & technologies

Cyber SecurityLinuxMacOS

About the role

Key responsibilities & impact

Consult and participate in day-to-day security operational activities with clients;
Confirm and document client vulnerability and security risks and develop mitigation plans;
Monitor and validate client security controls;
Respond to security alerts, incidents, and issues;
Ensure security controls meet multiple compliance needs and best practices;
Conduct, write, and present client Security and Risk Assessments using recognized frameworks (NIST SP 800-171 and PCI DSS v3.2 or other security compliance frameworks);
Create accurate network diagrams and documentation for planning security-based changes, investigating network impact, and issuing resolution procedures;
Coordinates and tracks security awareness training to the organizational workforce on information security standards, policies, and best practices;
Consistently review relevant Cyber Security Compliances to educate clients on revisions and changes in requirements;
Assist in investigating security breaches by leading the incident response to minimize impact, determine the cause of the breach, and ascertain the extent of the damage;
Travel as needed for on-site assessments and meetings at client locations; limited and infrequent.

Requirements

What you’ll need

Bachelor's degree preferable in Information Technology or other engineering or technical discipline
6-8 years IT experience and minimum 4 years Cyber Security Information experience
One or more Industry security certifications REQUIRED, Certified Information Systems Security Professional (CISSP), CISA Certified Information Systems Auditor (CISA), CISM Certified Information Security Manager (CISM), ISSAP Information Systems Security Architecture Professional (ISSAP), ISSEP Information Systems Security Engineering Professional (ISSEP); (OR equivalent)
Experience with modern operating systems including Windows 10/11 and Server 2016/2019, macOS, and Linux
In-depth understanding of NIST SP 800-171, CIS Controls, and/or other security compliance frameworks
Experience in developing organization security policies and implementation of revised policies
Experience with endpoint security solutions, including file integrity monitoring and data loss prevention.

Benefits

Comp & perks

Health and Dental
Life Insurance
Paid Time Off
Discretionary Bonus
Retirement Savings with Employer Matching Contribution
401(k)
401(k) matching
Dental insurance
Flexible spending account
Health insurance
Life insurance
Paid time off
Vision insurance