Lead implementation and maintenance of security controls to achieve CMMC 2.0 compliance for CUI. Conduct vulnerability assessments, incident response, threat hunting, and forensic analysis. Prepare and support CMMC assessments, maintain SSP/POA&M, collaborate with compliance and operations teams, and run continuous monitoring and security awareness training.
We are looking for a CMMC Security Engineer is responsible for implementing, maintaining, and leading cybersecurity efforts to ensure compliance with the Cybersecurity Maturity Model Certification (CMMC) standards, focusing on protecting Controlled Unclassified Information (CUI) for organizations in the Defense Industrial Base (DIB).
Key Responsibilities- Design, implement, and monitor security controls aligned with CMMC requirements, including access controls, encryption, endpoint protection, and secure configurations.
- Lead vulnerability assessments, scan remediation tracking, and continuous risk management across hybrid and cloud environments.
- Support incident response, threat hunting, and forensic analysis for cybersecurity events.
- Prepare for and facilitate CMMC assessments (self and third-party), maintain certification documentation (SSP, POA&M), and address audit findings.
- Collaborate with compliance managers, legal/data protection officers, and operations teams to ensure continuous alignment with NIST SP 800-171/DFARS controls.
- Oversee CMMC continuous monitoring programs and identify compliance gaps in workflows.
- Provide security awareness training and promote a culture of cybersecurity vigilance across departments.
- Deep understanding of CMMC 2.0 framework, NIST SP 800-171, and DFARS requirements.
- Experience conducting technical assessments, vulnerability management, and implementing FedRAMP Moderate or equivalent systems for CUI.
- Strong documentation skills for policies, procedures, and audit support.
- Ability to communicate technical findings to both technical and non-technical stakeholders.
- Knowledge of cloud (e.g., Azure, Microsoft 365) and on-premise security technologies.
- Bachelor’s degree in Information Security, Computer Science, or a related field.
- Professional certifications such as CISSP, CISM, GIAC, or CCA/CCP (CMMC-specific certifications preferred).
- Experience supporting DoD compliance or federal contracts is highly valued.
The role ensures a secure and compliant enclave for CUI, mitigates cybersecurity risks, leads compliance projects, and prepares for third-party assessments and audits under the evolving CMMC 2.0 regulations.
Red Cup IT Garden Grove, California, USA Office
14271 Corporate Dr, Garden Grove, California, United States, 92843
Similar Jobs
Marketing Tech • Social Media • Software • Analytics • Business Intelligence
Leads go-to-market financial planning and analysis, partnering with Sales, Revenue Operations, and Partnerships leadership. Owns GTM reporting, P&L planning, forecasting, variance analysis, financial modeling, pipeline and bookings analysis, sales capacity planning, quota setting, and compensation design. Builds scalable reporting and data solutions using Pigment, Salesforce, Tableau, and SQL while providing strategic insights on pricing, packaging, revenue, and business performance.
Top Skills:
ExcelPigmentSalesforceSQLTableau
HR Tech • Information Technology • Professional Services • Sales • Software
Leads payroll services and operations across the US and UK, owning strategy, implementation quality, customer outcomes, scalability, revenue, and P&L. Builds and scales payroll service models for SMB and mid-market customers, partners with Product, Engineering, Customer Success, Sales, and Operations, and develops a high-performing organization. Uses AI, automation, and innovative operating approaches to improve efficiency, retention, expansion, and service delivery.
Top Skills:
AIAutomationSaaS
Artificial Intelligence • Fintech • Insurance • Marketing Tech • Software • Analytics
Underwrite commercial auto, workers compensation, and general liability risks within Liberty Mutual’s emerging mobility practice. Build and manage a profitable, diversified book of business; evaluate complex risks; develop innovative underwriting approaches; collaborate with product, actuarial, legal, claims, and other underwriting teams; support cross-selling; maintain agent and broker relationships; and communicate underwriting guidance and processes.
What you need to know about the Los Angeles Tech Scene
Los Angeles is a global leader in entertainment, so it’s no surprise that many of the biggest players in streaming, digital media and game development call the city home. But the city boasts plenty of non-entertainment innovation as well, with tech companies spanning verticals like AI, fintech, e-commerce and biotech. With major universities like Caltech, UCLA, USC and the nearby UC Irvine, the city has a steady supply of top-flight tech and engineering talent — not counting the graduates flocking to Los Angeles from across the world to enjoy its beaches, culture and year-round temperate climate.
Key Facts About Los Angeles Tech
- Number of Tech Workers: 375,800; 5.5% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Snap, Netflix, SpaceX, Disney, Google
- Key Industries: Artificial intelligence, adtech, media, software, game development
- Funding Landscape: $11.6 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Strong Ventures, Fifth Wall, Upfront Ventures, Mucker Capital, Kittyhawk Ventures
- Research Centers and Universities: California Institute of Technology, UCLA, University of Southern California, UC Irvine, Pepperdine, California Institute for Immunology and Immunotherapy, Center for Quantum Science and Engineering
