[Hiring] Cybersecurity Engineer @Nooks

Role Description

As Cybersecurity Engineer, you own the security posture of Nooks' own unclassified environment — hardening it, assessing it against the National Institute of Standards and Technology (NIST) Special Publication (SP) 800-171 and the Cybersecurity Maturity Model Certification (CMMC), and keeping the evidence that proves it. This is a hands-on, individual-contributor role reporting to the Cyber Compliance and Policy Manager in IT/Cyber.

• Run the compliance program and do the technical work behind it.
• Focus on Nooks' own environment, including the customer-facing unclassified network deployed at all Nooks facilities.
• Set the cadence, run deep-dive self-assessments and internal audits.
• Translate NIST controls into practical configurations.

Qualifications

• U.S. citizenship (a compliance requirement for accessing CUI/ITAR data).
• 5–8 years in cybersecurity, with at least 3 years focused specifically on NIST SP 800-171 compliance and implementation.
• Demonstrated experience configuring and securing Google Workspace in a regulated environment.
• Proven ability to conduct technical self-assessments.
• Deep understanding of DFARS 252.204-7012/7019/7020, NIST SP 800-171, and CMMC Level 2 assessment guides.
• Active DoD 8570/8140 IAM Level II or III certification (e.g., CISSP, CISM, CASP+, or CAP).
• Strong ability to explain technical requirements to non-technical leadership.

Requirements

• Own the unclassified environment's compliance posture and maintain the System Security Plan (SSP) against NIST SP 800-171 and CMMC Level 2.
• Track findings and vulnerabilities and manage Plans of Action & Milestones (POA&Ms).
• Generate and maintain SPRS scores, identifying gaps ahead of third-party assessment.
• Strictly adhere to Change Management processes and the Change Control Board (CCB).
• Independently plan and execute comprehensive self-assessments of the unclassified network.
• Lead preparation for C3PAO assessments — compile evidence, interview technical staff.
• Secure and monitor both Google Workspace and Microsoft environments.
• Ensure Data Loss Prevention (DLP), access controls, and mobile device management (MDM) meet CUI protection requirements.
• Serve as the primary cybersecurity point of contact for evaluating new enterprise software introductions.

Benefits

• Base salary
• Performance bonus
• Equity
• Benefits: Medical, dental, vision, PTO, and 401(k).

Eligibility & Clearance

• Candidates must be U.S. citizens (a compliance requirement for accessing CUI/ITAR data).
• Authorized to work in the United States.
• An active security clearance is not required, though a Secret or Top Secret clearance is a plus.

Salary Range

Salary Range: $145,000 — $163,000 USD