Cybersecurity / CMMC Engineer

PeopleTec, Inc. is seeking a Cybersecurity / CMMC Engineer in Huntsville, AL to support cybersecurity and CMMC compliance for an on-premise AI system associated with the H-1 flight simulator. The position focuses on protecting CUI, maintaining assessment readiness, managing vulnerabilities, and delivering security evidence for customer reviews.

Responsibilities

• Maintain CMMC Level 2 and NIST SP 800-171 compliance, and keep required assessment records current.
• Develop and maintain cybersecurity and CUI data-handling procedures, including access, retention, protection, and disposal requirements.
• Review system and AI/ML architecture for security risks, vulnerabilities, supply-chain concerns, and requirements needed for future authorization.
• Manage vulnerability assessment and remediation activities, and coordinate the security evidence required with the engineering team.
• Prepare security documentation, incident-response materials, and evidence used for customer reviews, assessments, and transition activities.

Requirements

• Preferred experience range: 5–8 years of cybersecurity engineering or compliance experience supporting DoD or similarly controlled environments, including NIST SP 800-171 and CMMC Level 2 assessments.
• Demonstrated ability to perform the role will be considered regardless of total years of experience.
• Working knowledge of RMF, DISA STIGs, SCAP, and vulnerability assessment and remediation.
• Ability to travel on a limited basis for technical reviews and on-site security activities.
• Must be eligible for a Tier 3 background investigation and able to access CUI; eligibility must be maintained throughout employment.
• Must be a U.S. Citizen.
• Bachelor’s degree in cybersecurity, information technology, computer science, or a related field is preferred.
• Equivalent relevant professional or military experience may substitute for a degree.
• Security+, CISSP, or a comparable cybersecurity certification is preferred.
• Experience securing AI/ML systems, including model/data supply-chain security and SBOMs.
• Experience supporting ATO and RMF activities for systems deployed on Government networks.
• Experience with personnel security or facility security processes.

Required Technologies and Frameworks

• NIST SP 800-171
• CMMC Level 2
• RMF
• DISA STIGs
• SCAP
• SBOMs

Location and Work Setting

Huntsville, AL (onsite)

Education and Experience

Minimum experience: 5 years. Education: Bachelor’s degree in cybersecurity, information technology, computer science, or a related field (preferred).