Lead implementation and maintenance of security controls to achieve CMMC 2.0 compliance for CUI. Conduct vulnerability assessments, incident response, threat hunting, and forensic analysis. Prepare and support CMMC assessments, maintain SSP/POA&M, collaborate with compliance and operations teams, and run continuous monitoring and security awareness training.
We are looking for a CMMC Security Engineer is responsible for implementing, maintaining, and leading cybersecurity efforts to ensure compliance with the Cybersecurity Maturity Model Certification (CMMC) standards, focusing on protecting Controlled Unclassified Information (CUI) for organizations in the Defense Industrial Base (DIB).
Key Responsibilities- Design, implement, and monitor security controls aligned with CMMC requirements, including access controls, encryption, endpoint protection, and secure configurations.
- Lead vulnerability assessments, scan remediation tracking, and continuous risk management across hybrid and cloud environments.
- Support incident response, threat hunting, and forensic analysis for cybersecurity events.
- Prepare for and facilitate CMMC assessments (self and third-party), maintain certification documentation (SSP, POA&M), and address audit findings.
- Collaborate with compliance managers, legal/data protection officers, and operations teams to ensure continuous alignment with NIST SP 800-171/DFARS controls.
- Oversee CMMC continuous monitoring programs and identify compliance gaps in workflows.
- Provide security awareness training and promote a culture of cybersecurity vigilance across departments.
- Deep understanding of CMMC 2.0 framework, NIST SP 800-171, and DFARS requirements.
- Experience conducting technical assessments, vulnerability management, and implementing FedRAMP Moderate or equivalent systems for CUI.
- Strong documentation skills for policies, procedures, and audit support.
- Ability to communicate technical findings to both technical and non-technical stakeholders.
- Knowledge of cloud (e.g., Azure, Microsoft 365) and on-premise security technologies.
- Bachelor’s degree in Information Security, Computer Science, or a related field.
- Professional certifications such as CISSP, CISM, GIAC, or CCA/CCP (CMMC-specific certifications preferred).
- Experience supporting DoD compliance or federal contracts is highly valued.
The role ensures a secure and compliant enclave for CUI, mitigates cybersecurity risks, leads compliance projects, and prepares for third-party assessments and audits under the evolving CMMC 2.0 regulations.
Red Cup IT Garden Grove, California, USA Office
14271 Corporate Dr, Garden Grove, California, United States, 92843
Similar Jobs
Healthtech • Social Impact • Software
Provide phone and live-chat billing support to clients and therapists. Troubleshoot platform and insurance-related issues, explain benefits, interpret EOBs, educate users, identify root causes, and collaborate with Product teams to improve the platform. The role requires empathy, independent remote work, problem-solving, quantitative performance management, and experience with commercial and government payors.
Top Skills:
AvailityClaim MdCptIcd-10
Fintech • Mobile • Software • Financial Services
Owns end-to-end creative concepts and visual design for digital marketing and advertising campaigns across email, in-app messaging, social media, branding, lead generation, video, and display. Collaborates with copywriters, marketers, designers, developers, and stakeholders to develop compelling brand storytelling, test and optimize creative, and improve business results. Champions the brand while exploring AI tools to increase creative workflow efficiency.
Top Skills:
Adobe After EffectsAdobe Creative SuiteAdobe SubstanceFigmaGenerative Ai Software
Fintech • Mobile • Software • Financial Services
Build and govern scalable Figma templates, components, libraries, variables, and production systems across digital and print channels. Translate brand standards into flexible assets, maintain design system documentation and governance, audit files for quality and accessibility, manage versioning and digital asset libraries, and improve high-volume production workflows. The role also supports adaptations across formats, localization, content updates, and print production while ensuring consistency, accuracy, and efficiency.
Top Skills:
Adobe Creative CloudAdobe IllustratorAdobe IndesignAdobe PhotoshopFigma
What you need to know about the Los Angeles Tech Scene
Los Angeles is a global leader in entertainment, so it’s no surprise that many of the biggest players in streaming, digital media and game development call the city home. But the city boasts plenty of non-entertainment innovation as well, with tech companies spanning verticals like AI, fintech, e-commerce and biotech. With major universities like Caltech, UCLA, USC and the nearby UC Irvine, the city has a steady supply of top-flight tech and engineering talent — not counting the graduates flocking to Los Angeles from across the world to enjoy its beaches, culture and year-round temperate climate.
Key Facts About Los Angeles Tech
- Number of Tech Workers: 375,800; 5.5% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Snap, Netflix, SpaceX, Disney, Google
- Key Industries: Artificial intelligence, adtech, media, software, game development
- Funding Landscape: $11.6 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Strong Ventures, Fifth Wall, Upfront Ventures, Mucker Capital, Kittyhawk Ventures
- Research Centers and Universities: California Institute of Technology, UCLA, University of Southern California, UC Irvine, Pepperdine, California Institute for Immunology and Immunotherapy, Center for Quantum Science and Engineering
