Cyber Security Engineer- Compliance

Quest Defense Systems & Solutions•Tucson, AZ

1d•Onsite

About The Position

Immediately hiring engineers who want to contribute to mission-critical systems that demand precision, accountability, and technical excellence. Success here means solving real problems that keep complex systems moving forward. We are seeking a Cybersecurity Compliance Engineer to support the implementation, maintenance, and validation of cybersecurity controls for engineering test equipment, systems, and operational technology (OT) environments. In this role, you will work with engineering, production, procurement, and IT teams to ensure systems comply with regulatory, contractual, and enterprise cybersecurity requirements. You will implement technical security controls, assess system vulnerabilities, support Authority to Operate (ATO) activities, and help maintain secure, compliant production environments. This position is ideal for a cybersecurity professional with experience supporting regulated environments, systems administration, vulnerability management, and cybersecurity compliance frameworks such as NIST SP 800-171 and CMMC. This is a 100% onsite position based in Tucson, Arizona, where you'll enjoy the collaboration of working alongside your team every day. With more than 310 days of sunshine each year, stunning mountain views, and a vibrant yet relaxed lifestyle, Tucson offers an exceptional place to build both your career and your life. All candidates must be US Citizens due to the nature of the work. Clearance or the ability to obtain a clearance is strongly preferred unless otherwise stated below.

Requirements

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or another STEM-related discipline.
Minimum of 2 years of professional cybersecurity, systems administration, or information assurance experience.
Experience implementing or supporting NIST SP 800-171 compliance.
Experience performing system vulnerability analysis and remediation.
Working knowledge of: Windows operating systems, Linux operating systems, Networking fundamentals.
Experience supporting cybersecurity compliance in regulated environments.
Strong troubleshooting and analytical problem-solving skills.
Excellent written and verbal communication skills.
U.S. Citizenship required.

Nice To Haves

Experience supporting CMMC implementation or assessment readiness.
Experience working with DFARS 252.204-7012 requirements.
Knowledge of NIST SP 800-53 security controls.
Experience supporting Operational Technology (OT) or industrial control system environments.
Experience conducting cybersecurity risk assessments.
Experience implementing Security Technical Implementation Guides (STIGs).
Experience with Windows or Linux system administration.
Experience supporting engineering laboratories, manufacturing, or production environments.
Experience preparing Authority to Operate (ATO) documentation.

Responsibilities

Implement and maintain cybersecurity controls for engineering test equipment, systems, and supporting infrastructure.
Ensure compliance with cybersecurity frameworks and contractual requirements, including: NIST SP 800-171, CMMC, DFARS 252.204-7012, NIST SP 800-53 (as applicable), NIST SP 800-82 for Operational Technology (OT) environments.
Translate cybersecurity and regulatory requirements into technical security controls and implementation plans.
Support Authority to Operate (ATO) activities by preparing and maintaining required cybersecurity artifacts and documentation.
Perform system vulnerability assessments and remediation activities.
Maintain accurate asset inventories and configuration records in accordance with iRAMP and organizational cybersecurity requirements.
Provide cybersecurity guidance to engineering teams supporting production and procurement of test equipment.
Install software packages, operating system updates, and security patches on engineering systems and test equipment.
Troubleshoot engineering test equipment to ensure secure operation, connectivity, functionality, and compliance.
Partner with Digital Technologies and infrastructure teams to integrate engineering systems into secure enterprise networks.
Support ongoing compliance audits, security assessments, and continuous monitoring activities.