Cybersecurity / CMMC Engineer
Job Description
PeopleTec, Inc. is seeking a Cybersecurity / CMMC Engineer in Huntsville, AL to support cybersecurity and CMMC compliance for an on-premise AI system used in support of the H-1 flight simulator. The position focuses on protecting CUI, sustaining assessment readiness, addressing vulnerabilities, and producing security evidence for customer review and transition activities.
Key Responsibilities
- Maintain CMMC Level 2 and NIST SP 800-171 compliance and keep required assessment records current.
- Develop and maintain cybersecurity and CUI data-handling procedures, including access, retention, protection, and disposal requirements.
- Review system and AI/ML architecture to identify security risks, vulnerabilities, supply-chain concerns, and authorization requirements for future authorization efforts.
- Manage vulnerability assessment and remediation activities, and coordinate the security evidence needed by the engineering team.
- Prepare security documentation, incident-response materials, and supporting evidence for customer reviews, assessments, and transition activities.
Required Qualifications
- 5+ years of cybersecurity engineering or compliance experience supporting DoD or similarly controlled environments.
- Preferred experience range: 5–8 years, including experience with NIST SP 800-171 and CMMC Level 2 assessments.
- Demonstrated ability to perform the role will be considered regardless of total years of experience.
- Working knowledge of RMF and DISA STIGs, SCAP, and vulnerability assessment and remediation.
- Ability to travel on a limited basis for technical reviews and on-site security activities.
- Eligible for a Tier 3 background investigation and able to obtain and maintain access to CUI; eligibility must remain current throughout employment.
- U.S. Citizenship required.
- Preferred education: Bachelor’s degree in cybersecurity, information technology, computer science, or a related field.
- Equivalent relevant professional or military experience may substitute for a degree.
- Preferred certifications: Security+, CISSP, or a comparable cybersecurity certification.
Additional Experience Areas
- Experience securing AI/ML systems, including model and data supply-chain security and SBOMs.
- Experience supporting ATO/RMF activities for systems deployed on Government networks.
- Experience supporting personnel security or facility security processes.
Relevant Technologies and Frameworks
- NIST SP 800-171
- CMMC Level 2
- RMF
- DISA STIGs
- SCAP
- SBOMs
Location
Huntsville, AL (onsite)