Security Engineer

Northern Technologies Group, Inc.•Lake Magdalene, FL

16h

About The Position

The Security Engineer is a critical technical role responsible for the design, implementation, and auditing of security controls to meet CMMC and NIST 800-171 requirements. This position focuses on securing highly regulated environments, including GCC-High, and requires expertise in writing comprehensive security policies. This role requires a minimum of 5 years of experience in the cybersecurity field. The Security Engineer will lead CMMC audit preparation and assist with escalations from the SOC that require advanced engineering support.

Requirements

5 or more years of documented experience in Cybersecurity.
Strong understanding of NIST 800-171 and CMMC frameworks.
Expertise in Microsoft Sentinel, Purview, and Microsoft Defender.
Proficiency in managing security within GCC-High environments.
Proficiency in scripting and automation for security processes (e.g., Python, PowerShell).
Knowledge of Major AI platforms and tools.
Excellent analytical skills to perform detailed cyber threat and vulnerability assessments.
Strong written communication skills for authoring security policies and reporting.
Experience presenting technical findings to non-technical stakeholders.

Nice To Haves

Multi-cloud vendor experience, including Microsoft Azure and Google Cloud Platform, is preferred.
Bachelor’s degree in computer science, information security, or a related discipline.
Relevant certifications such as CISSP, CEH, or specialized CMMC/NIST certifications.

Responsibilities

Perform advanced analysis to identify and mitigate vulnerabilities specifically related to CMMC and NIST 800-171 controls.
Lead the implementation and optimization of security tools needed for compliance, including Microsoft Sentinel, Purview, and Microsoft Defender.
Utilize Netsys and other specialized tools to meet and validate the 800-171 controls outlined in the CMMC.
Author and maintain technical security policies and procedures required for official audits.
Act as an escalation point for the SOC, providing technical guidance on complex security issues and incident response.
Operate and tune security tools such as EDR, SIEM, and forensic tools to improve detection and alerting.
Document lessons learned from security incidents and integrate them into compliance playbooks.
Work closely with IT, engineering, and compliance teams to address and mitigate security risks across internal and MSP environments.
Serve as a technical liaison between the security team and leadership, providing updates on the compliance and security landscape.
Utilize AI platforms such as Co-Pilot, Gemini, or Claude to automate tasks and streamline compliance reporting.