Cybersecurity Engineer

ComTec Solutions is seeking a Cybersecurity Engineer to act as a subject matter expert for security direction, security reviews, and CMMC Compliance. This onsite role in Rochester, NY includes cross-project support from early planning through delivery, along with security risk assessments and technical guidance across client tickets and compliance efforts.

Responsibilities

• Engage in project initiation, requirements, and design phases to ensure security considerations are included at the appropriate level based on identified risks.
• Perform security review and design for complex applications and technologies.
• Evaluate and maintain security system plans and procedures to help protect internal information systems.
• Research, recommend, and help implement procedural and system changes that enhance security in alignment with corporate policies.
• Identify key risks and issues, ensure they are addressed and resolved in a way that satisfies business needs.
• Conduct security risk assessments to determine the appropriate level of security services to include.
• Document customers’ systems as part of security and compliance work.
• Serve as a liaison between ComTec Solutions and cybersecurity vendors.
• Complete weekly review and analysis of cybersecurity reports.
• Monitor assigned tickets and tasks, providing service or escalation as needed.
• Develop tasks and milestones for security projects.
• Translate business and non-functional requirements into security controls, supporting security architecture and documenting the security solution for communication and publication.
• Maintain accurate ticket information, including notes and resolution details.
• Follow departmental policies for reporting and managing requests and change controls.
• Maintain daily timesheet and expense report entries and submit them accurately and on time.
• Perform other duties as required.

Requirements

• 5 years working in Information Technology; 2 years in Cybersecurity; 1 year in CMMC compliance.
• Strong security architecture background with deep knowledge of IT network security including secure LAN, secure WAN, vLAN, MPLS, and secure network zoning with restricted network design, plus cloud-based technologies.
• Strong network engineering background with deep knowledge of Windows Server architecture, Windows virtualization, networking, backup solutions, and disaster recovery.
• Strong Microsoft security architecture knowledge focused on server and workstation security.
• Ability to troubleshoot server-based software issues involving Microsoft Windows Server; on-premise Microsoft Exchange and hosted Microsoft Office 365; Microsoft Remote Desktop Services; Microsoft Hyper-V and VMWare; enterprise EDR and MDR solutions; and enterprise-class backup solutions.
• Knowledgeable of NAS/SAN solutions and workstation/server hardware and software troubleshooting.
• Strong understanding of networking equipment including switches, firewalls, and wireless access points.
• Strong written and verbal communication skills and a pleasant, professional demeanor with clients and internal teams.
• Ability to multi-task, work independently on daily tasks, and stay organized.
• Ability to work with clients at all levels, from executive to IT to end user.
• Knowledge of vulnerability management and current vulnerabilities, response, and mitigation strategies.
• Experience designing and incorporating technical security controls aligned to NIST 800-171 and/or CMMC.
• Familiarity with NIST SP 800-171 and/or NIST SP 800-53.
• Certified CMMC Professional (CCP).
• Information security qualifications such as CISSP, CISM, CISA, and ISSAP are a plus.
• Ability to schedule occasional evening or weekend work.
• Valid driver’s license and reliable personal vehicle.
• Comfort using computer and office equipment and remaining calm in stressful situations.
• Performs all administrative functions expected at this level.

Technologies

• Secure LAN, secure WAN, vLAN, MPLS
• NIST 800-171, NIST SP 800-53
• CMMC
• Microsoft Windows Server
• On Premise Microsoft Exchange, Microsoft Office 365
• Microsoft Remote Desktop Services
• Microsoft Hyper-V, VMWare
• Enterprise EDR and MDR solutions
• Enterprise-class backup solutions
• NAS/SAN solutions
• Switches, Firewalls, Wireless Access Points
• Windows Virtualization
• Disaster Recovery

Location and Schedule

• Rochester, NY (onsite)
• Minimal travel
• Billable hours: 80% of worked hours

Compensation

USD 110,000 to 113,000 per year