> Markdown version of [/jobs/ext/1205379-cyber-security-engineer-compliance](https://www.wearedevelopers.com/jobs/ext/1205379-cyber-security-engineer-compliance). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cyber Security Engineer- Compliance

- **Company:** QuEST Defense
- **Location:** Tucson, AZ, United States
- **Experience:** Experienced
- **Salary:** $110,240.0 - $120,640.0
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Systems Engineering, Cyber Security, Linux, Linux System Administration, Networking Basics, Software Vulnerability Management, Computer Networking Systems, Information Technology, Process Control Systems, Operational Systems, Vulnerability Analysis
- **Published:** July 8, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=7f77377c9531f2c8

## About the Role

* Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or another STEM-related discipline.
 * Minimum of 2 years of professional cybersecurity, systems administration, or information assurance experience.
 * Experience implementing or supporting NIST SP 800-171 compliance.
 * Experience performing system vulnerability analysis and remediation.
 * Working knowledge of:
 + Windows operating systems
 + Linux operating systems
 + Networking fundamentals
 * Experience supporting cybersecurity compliance in regulated environments.
 * Strong troubleshooting and analytical problem-solving skills.
 * Excellent written and verbal communication skills.
 * S. Citizenship required.

Preferred Qualifications

 * Experience supporting CMMC implementation or assessment readiness.
 * Experience working with DFARS 252.204-7012 requirements.
 * Knowledge of NIST SP 800-53 security controls.
 * Experience supporting Operational Technology (OT) or industrial control system environments.
 * Experience conducting cybersecurity risk assessments.
 * Experience implementing Security Technical Implementation Guides (STIGs).
 * Experience with Windows or Linux system administration.
 * Experience supporting engineering laboratories, manufacturing, or production environments.
 * Experience preparing Authority to Operate (ATO) documentation.

## Description

We are seeking a Cybersecurity Compliance Engineer to support the implementation, maintenance, and validation of cybersecurity controls for engineering test equipment, systems, and operational technology (OT) environments.

In this role, you will work with engineering, production, procurement, and IT teams to ensure systems comply with regulatory, contractual, and enterprise cybersecurity requirements. You will implement technical security controls, assess system vulnerabilities, support Authority to Operate (ATO) activities, and help maintain secure, compliant production environments.

This position is ideal for a cybersecurity professional with experience supporting regulated environments, systems administration, vulnerability management, and cybersecurity compliance frameworks such as NIST SP 800-171 and CMMC., * Implement and maintain cybersecurity controls for engineering test equipment, systems, and supporting infrastructure.

 * Ensure compliance with cybersecurity frameworks and contractual requirements, including:
 + NIST SP 800-171
 + CMMC
 + DFARS 252.204-7012
 + NIST SP 800-53 (as applicable)
 + NIST SP 800-82 for Operational Technology (OT) environments
 * Translate cybersecurity and regulatory requirements into technical security controls and implementation plans.
 * Support Authority to Operate (ATO) activities by preparing and maintaining required cybersecurity artifacts and documentation.
 * Perform system vulnerability assessments and remediation activities.
 * Maintain accurate asset inventories and configuration records in accordance with iRAMP and organizational cybersecurity requirements.
 * Provide cybersecurity guidance to engineering teams supporting production and procurement of test equipment.
 * Install software packages, operating system updates, and security patches on engineering systems and test equipment.
 * Troubleshoot engineering test equipment to ensure secure operation, connectivity, functionality, and compliance.
 * Partner with Digital Technologies and infrastructure teams to integrate engineering systems into secure enterprise networks.
 * Support ongoing compliance audits, security assessments, and continuous monitoring activities.


## Related Videos

- [Fake or News: Translating Dog Barks, Notepad Gets an Upgrade and Michelin-Star Robots - Paul Tregoing](https://www.wearedevelopers.com/videos/1802-fake-or-news-translating-dog-barks-notepad-gets-an-upgrade-and-michelin-star-robots-paul-tregoing)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)