Cybersecurity Specialist CMMC

ACG Inc.
El Paso, TX, United States
about 2 months ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Experienced
Experience required
3 years minimum
Compensation
$48,000.0 - $58,000.0
Working hours
Regular working hours
Job source

Tech stack

Amazon Web Services Microsoft Azure Cloud Computing Security Cyber Security Network Security Software Vulnerability Management Firewalls (Computer Science) SolarWinds (Software) Splunk Software Version Control Vulnerability Analysis

Job description

As our CMMC Cybersecurity Specialist, you will own the implementation, maintenance, and continuous improvement of ACG’s cybersecurity posture. Your main mission will be ensuring CMMC Level 2 compliance, protecting Controlled Unclassified Information (CUI), and keeping our organization audit-ready for federal contracts., * CMMC & Compliance Leadership: Lead the day-to-day sustainment of CMMC Level 2 controls and maintain alignment with NIST SP 800-171 requirements.

  • Audit Readiness: Prepare, organize, and maintain robust compliance evidence; act as a key technical point of contact during assessments.
  • Security Operations: Oversee technical and administrative security controls, including vulnerability management, patch tracking, incident response, and secure CUI handling.
  • Documentation & QMS: Develop and update cybersecurity policies, SOPs, and system security plans (SSP) ensuring proper version control and traceability.
  • Culture & Training: Support company-wide cybersecurity awareness training and collaborate with HR on personnel security requirements.

Requirements

Do you have experience in Vuls?, * Experience: 3+ years in cybersecurity, information security, or compliance roles.

  • Compliance Frameworks: Hands-on experience with NIST SP 800-171 and CMMC Level 2 implementation (highly preferred).
  • Environment: Experience in federal contracting, defense industrial base (DIB), or highly regulated environments., * Solid understanding of secure network architecture, access control, and cloud security best practices (AWS or Azure, FedRAMP familiarity is a huge plus).
  • Familiarity with security tools such as SIEMs (Splunk, SolarWinds), firewalls, and vulnerability scanners.
  • Strong technical writing skills-you can translate complex security controls into clear, compliant documentation.
  • An organized, proactive mindset with the ability to receive direct feedback and drive results.

Benefits & conditions

Pulled from the full job description

  • Professional development assistance
  • 401(k)
  • Health insurance
  • 401(k) matching
  • Paid time off
  • Vision insurance
  • Dental insurance, * Competitive Base Salary
  • 401(k) with Company Match
  • Comprehensive Health, Dental, and Vision Insurance
  • Paid Time Off (PTO)
  • Clear pathways for professional growth and leadership.

Job Type: Full-time

Pay: $48,000.00 - $58,000.00 per year, * 401(k)

  • 401(k) matching
  • Dental insurance
  • Health insurance
  • Paid time off
  • Professional development assistance
  • Vision insurance

About the company

At ACG, we blend the agility and warmth of a fast-growing, family-minded business with a high-performance culture built on ownership, discipline, and real results. We believe in clear communication, continuous improvement, and rewarding excellence. If you thrive in structured environments where your execution translates directly into professional and financial growth (including profit sharing!), you’ll fit right in.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on indeed.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

1:45 min

Transitioning from software development to security roles

Stefania Chaplin · WWC 2022

1:06 min

Outline of free tools for Microsoft Azure

Radu Vunvulea Radu Vunvulea · WWC 2022

4:11 min

Introduction to cloud-native application developer security

Micah Silverman · WWC 2022

2:38 min

Establishing comprehensive monitoring and log management

Michael Eder +1 · LIVE

5:01 min

Container hosting options available on Microsoft Azure

Federico Fregosi · WWC 2022

3:44 min

Current industry adoption and future security initiatives

Alexander Allmendinger · LIVE

Videos

See all

Related articles

See all