Cyber Security Specialist

The Armor Group • Mason, OH

6d

About The Position

The Cybersecurity Specialist designs, implements, and maintains the organization’s IT cybersecurity program in alignment with NIST SP 800-171, CMMC IT requirements, and applicable federal regulations. The role owns the day-to-day security posture of on-premises infrastructure and Microsoft 365 environments, supports audit readiness, and serves as the internal subject-matter expert for protecting IT assets. It is a hands-on technical position that also requires communicating complex security requirements as actionable guidance for non-technical staff and partnering with the Compliance Manager on CMMC and NIST regulatory frameworks.

The Specialist supports and maintains compliance documentation, including the System Security Plan (SSP), Plan of Action & Milestones (POA&M), CUI scope definition, data flow diagrams, and assessment boundary documentation. The role assesses and remediates compliance gaps, designs required compliance frameworks and technical environments, and prepares the organization for third-party CMMC assessments.

The position administers and hardens on-premises infrastructure and Microsoft 365 security, including identity, endpoint protection, network segmentation, patching, information protection, device management, and access controls. It also monitors security events, investigates incidents, coordinates vulnerability and penetration testing activities, maintains policies and procedures, and provides security guidance and awareness support to employees.

The position is primarily office-based. Work outside normal business hours may be required for incident response or maintenance windows. The role involves sitting for extended periods and working at a computer workstation, with occasional lifting of IT equipment up to 40 lbs.

Requirements

• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or a related field, or an equivalent combination of education and directly relevant experience.
• 3–5+ years of hands-on experience in an IT security or systems administration role.
• Proven experience administering Microsoft 365 security features in a production environment.
• Experience managing on-premises Windows Server environments, including Active Directory.
• Familiarity with firewall administration.
• Demonstrated experience implementing or assessing against NIST SP 800-171 controls.
• Familiarity with Zero Trust Architecture principles and implementation.
• CompTIA Security+ or equivalent certification is required.
• Ability to explain security requirements clearly to non-technical staff.
• Attention to detail in maintaining precise, audit-ready CMMC and NIST documentation.
• Ability to take initiative on compliance gaps without waiting for direction.
• Ability to maintain strict confidentiality when handling sensitive data.
• Ability to collaborate across compliance and operations teams.
• Ability to stay current with evolving CMMC rulemaking and adapt quickly.
• Ability to sit for extended periods and work at a computer workstation.
• Ability to occasionally lift IT equipment up to 40 lbs.

Nice To Haves

• Experience with CMMC compliance, gap assessments, or C3PAO assessments.
• Experience with GCC High, Preveil, SecureFrame, or Quick Track solutions.
• CompTIA CySA+ certification.
• Certified CMMC Professional (CCP) certification.
• CCA certificate.

Responsibilities

• Support, update, and maintain the System Security Plan (SSP), Plan of Action & Milestones (POA&M), and supporting IT compliance documentation in coordination with the Compliance Manager.
• Recommend, architect, and design compliance frameworks, enclaves, hardware, and software required to meet compliance requirements.
• Conduct and track gap assessments against NIST SP 800-171 controls and CMMC Level 2 practice requirements.
• Lead remediation of identified control gaps, coordinating with IT staff, management, and third-party vendors as needed.
• Prepare the organization for third-party CMMC assessments and serve as the primary IT point of contact during assessment activities.
• Maintain and update CUI scope definitions, data flow diagrams, and assessment boundary documentation in coordination with the Compliance Manager.
• Administer and harden on-premises Active Directory, DNS, DHCP, and file server environments in accordance with security baselines such as CIS Benchmarks and DISA STIGs.
• Configure and manage firewalls, VLANs, and network segmentation controls to isolate CUI environments.
• Manage endpoint protection platforms (EPP/EDR) across on-premises workstations and servers, and configure and manage antivirus and EDR products.
• Oversee patch management for operating systems, firmware, and third-party applications.
• Implement and monitor MFA for user and privileged accounts.
• Control and audit removable media and portable storage device use.
• Administer and harden Microsoft 365 security, including Exchange Online, SharePoint Online, OneDrive for Business, and Microsoft Teams.
• Implement and enforce Microsoft Purview Information Protection policies, including CUI labeling, data loss prevention, and retention policies.
• Manage Conditional Access policies, Entra ID (Azure AD) security settings, and Privileged Identity Management (PIM).
• Configure and maintain Microsoft Secure Score benchmarks and remediate identified gaps on a defined schedule.
• Administer Microsoft Intune for mobile device management (MDM) and mobile application management (MAM).
• Monitor security event logs, SIEM alerts, and threat intelligence feeds on an ongoing basis.
• Lead security incident investigation and response, documenting findings and corrective actions in accordance with DFARS 252.204-7012 reporting requirements.
• Conduct periodic vulnerability scans, coordinate penetration testing, and track and remediate findings.
• Perform scheduled user access reviews and enforce least privilege and separation of duties.
• Manage and review privileged account activity and administrator access logs.
• Develop, maintain, and enforce IT security policies, standards, and procedures.
• Provide targeted guidance to program, engineering, and administrative staff on CUI handling, marking, and protection related to IT equipment and software systems.
• Support HR with security aspects of employee onboarding and offboarding processes.

What This Job Offers

• Job Type: Full-time