Compliance Engineer

🕒 Abril 24

Candidatar-se

Encontrar Vagas Remotas Similares

Receber Emails de Vagas Remotas

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo

CyberSheath

SiteLinkedInTodas as Vagas

51 - 200 funcionários

Fundada em 2012

🔒 Cibersegurança

📋 Conformidade

💳 Fintech

💰 Private Equity Round em 2021-12

Cybersecurity • Compliance • Fintech

A CyberSheath é uma empresa de cibersegurança que se especializa em ajudar clientes a alcançarem conformidade com o Modelo de Maturidade de Cibersegurança do Departamento de Defesa (CMMC) e padrões NIST relacionados. Com um histórico comprovado, eles avaliam, implementam e gerenciam medidas de segurança para garantir que seus clientes atendam aos rigorosos requisitos de cibersegurança. A CyberSheath oferece serviços gerenciados personalizados e soluções inovadoras, incluindo sua Federal Enclave, para facilitar a conformidade rápida para contratantes de defesa.

Descrição

• Implement, configure, and maintain security controls in line with CMMC requirements • Collaborate with internal and external stakeholders to ensure ongoing compliance with CMMC standards • Serve as the internal subject matter expert on CMMC-related technical questions and processes • Design and deploy secure configurations for Microsoft 365, Azure, Azure Virtual Desktop, and the Microsoft Defender XDR suite • Manage security baselines, conditional access policies, and monitoring/alerting configurations • Coordinate with IT operations and security teams to remediate vulnerabilities and align with compliance objectives • Utilize Active Directory, firewalls, and related security or network tools to ensure compliance and gather logs/artifacts as evidence • Gather, document, and maintain the artifacts necessary to demonstrate compliance (system configurations, implementation records, access control logs, and related evidence) • Collaborate with cross-functional teams (IT, Security, DevOps) to validate and record operational and security processes in compliance with CMMC • Provide expert guidance and support during client-facing CMMC audits, which may include up to 25% travel • Communicate technical aspects of CMMC controls and remediation strategies clearly to both technical and non-technical audiences

🎯 Requisitos

• 3–5+ years in implementing and managing technical security controls in Microsoft environments • Hands-on experience with Microsoft 365 Administration & Security (tenant hardening, identity & access management, conditional access) • Hands-on experience with Azure & Azure Virtual Desktop (security configuration, monitoring, role-based access control) • Hands-on experience with Microsoft Defender XDR Suite (Defender for Endpoint, Defender for Office 365, etc.) • Hands-on experience with Group Policy Objects (GPOs) and Intune for device and application management • Hands-on experience with Active Directory (managing user/groups, reviewing logs, applying group policies) • Hands-on experience with Firewalls (configuring rules, reviewing logs, interpreting firewall outputs) • Demonstrated track record of working with CMMC controls or similar regulatory/compliance frameworks (e.g., NIST 800-171, DFARS) • Strong understanding of SIEM tools and security incident management workflows.

🏖️ Benefícios

• Flexible Schedule & After-Hours Work • 100% Remote work environment with occasional (25%) travel to client sites