Compliance Engineer

MI Technical Solutions is a Woman-Owned Small Business (WOSB) comprised of a broad range of talented employees that provide diversified engineering and technical support services since 2004! Our team works tirelessly to build a respected, results-oriented brand. We are headquartered in Chesapeake, VA with employees located near each of the Navy Fleet Centers within the continental United States (San Diego, Jacksonville, Seattle, New England, Norfolk) as well as Hawaii and Japan.

Position Description: MI Technical Solutions is seeking a Compliance Engineer to join its team. In this role, the Compliance Engineer is responsible for interpreting security control environments, assisting in implementing technical safeguards, and responding to security alerts in support of NIST, CMMC, and RMF compliance frameworks.

Responsibilities:

• Evaluate systems for compliance against a variety of standards.
• Perform log analysis, incident response, and other recurring actions in support of continuous monitoring operations.
• Identify gaps in compliance and remediate said gaps using technical controls.
• Monitor on-premises and cloud-based systems for intrusions, suspicious activity, and unauthorized activity.
• Configure, optimize, and test controls to ensure compliance and proper function.
• Support the creation of configuration baselines to include developing application allow-lists, ACL's, etc.
• Analyze and interpret test results from a variety of evaluation tools.
• Remediate findings that were exposed during security testing procedures.
• Support the creation of administrative policy to cover gaps that cannot be filled with technical controls.
• Provide guidance on vulnerability and malware remediation.

Requirements:

• DoD Secret Clearance
• Bachelor's degree in Cyber Security, Computer Science, or a related degree, or 4+ year's work experience in IT security and compliance
• Must have current CompTIA Sec+
• Experience with compliance frameworks such as NIST 800-171, CMMC, etc.
• Experience with continuous monitoring operations and information assurance management
• Experience with the Risk Management Framework (RMF) process
• Experience with security architecture
• Experience with Windows, Linux/Unix, and Cisco iOS platforms highly preferred
• Familiarity with the OSI model and common ports and protocols (SSH, Telnet, DHCP, etc.)
• Familiarity with DoD systems and technologies
• Effective writing, speaking, analytical, and customer service skills
• Up to 10% travel

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.