> Markdown version of [/jobs/ext/2008289-cmmc-security-engineer](https://www.wearedevelopers.com/jobs/ext/2008289-cmmc-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# CMMC Security Engineer

- **Company:** Red Cup IT, Inc.
- **Location:** United States
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Microsoft Azure, Cloud Computing, Cyber Security, Software Vulnerability Management, Information Technology, Cybercrime, Plan of Action and Milestones, Vulnerability Analysis
- **Published:** August 9, 2026
- **Apply:** https://www.wayup.com/i-j-CMMC-Security-Engineer-Red-Cup-IT-Inc-641971314655847/

## About the Role

+ Deep understanding of CMMC 2.0 framework, NIST SP 800-171, and DFARS requirements.
 + Experience conducting technical assessments, vulnerability management, and implementing FedRAMP Moderate or equivalent systems for CUI.
 + Strong documentation skills for policies, procedures, and audit support.
 + Ability to communicate technical findings to both technical and non-technical stakeholders.
 + Knowledge of cloud (e.g., Azure, Microsoft 365) and on-premise security technologies., + Bachelor's degree in Information Security, Computer Science, or a related field.
 + Professional certifications such as CISSP, CISM, GIAC, or CCA/CCP (CMMC-specific certifications preferred).
 + Experience supporting DoD compliance or federal contracts is highly valued.

## Description

We are looking for a CMMC Security Engineer is responsible for implementing, maintaining, and leading cybersecurity efforts to ensure compliance with the Cybersecurity Maturity Model Certification (CMMC) standards, focusing on protecting Controlled Unclassified Information (CUI) for organizations in the Defense Industrial Base (DIB)., + Design, implement, and monitor security controls aligned with CMMC requirements, including access controls, encryption, endpoint protection, and secure configurations.

 + Lead vulnerability assessments, scan remediation tracking, and continuous risk management across hybrid and cloud environments.
 + Support incident response, threat hunting, and forensic analysis for cybersecurity events.
 + Prepare for and facilitate CMMC assessments (self and third-party), maintain certification documentation (SSP, POA&M), and address audit findings.
 + Collaborate with compliance managers, legal/data protection officers, and operations teams to ensure continuous alignment with NIST SP 800-171/DFARS controls.
 + Oversee CMMC continuous monitoring programs and identify compliance gaps in workflows.
 + Provide security awareness training and promote a culture of cybersecurity vigilance across departments., The role ensures a secure and compliant enclave for CUI, mitigates cybersecurity risks, leads compliance projects, and prepares for third-party assessments and audits under the evolving CMMC 2.0 regulations.


## Related Videos

- [Maturity assessment for technicians or how I learned to love OWASP SAMM](https://www.wearedevelopers.com/videos/351-maturity-assessment-for-technicians-or-how-i-learned-to-love-owasp-samm)
- [Developer Tools for Microsoft Azure](https://www.wearedevelopers.com/videos/450-developer-tools-for-microsoft-azure)
- [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Develop enterprise-ready applications for Microsoft Teams with Azure resources on modern web technologies](https://www.wearedevelopers.com/videos/187-develop-enterprise-ready-applications-for-microsoft-teams-with-azure-resources-on-modern-web-technologies)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)

## Related Articles

- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Dev Digest 188: CfP time, the risks of NPM and IKEA algorithms](https://www.wearedevelopers.com/magazine/635-dev-digest-188-cfp-time-the-risks-of-npm-and-ikea-algorithms)