{"id":2951113,"url":"https://alion.io/job/nooks-cybersecurity-engineer","title":"Cybersecurity Engineer","company":{"id":3797787,"name":"Nooks","domain":"nooks.works","url":"https://alion.io/company/nooks-2","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":145000,"max":163000,"currency":"USD","period":"year","gross":null,"usd_annual":163000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"CMMC","optional":false},{"name":"DLP","optional":false},{"name":"Gmail","optional":false},{"name":"Google Workspace","optional":false},{"name":"IAM","optional":false},{"name":"NIST 800-171","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-10-20T17:53:42Z","employer_posted_date":"2026-10-20","last_verified_at":"2026-10-24T11:22:31Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"ABOUT NOOKS\nNooks is pioneering Classified-Infrastructure-as-a-Service (CIaaS) - designing, building, and operating Sensitive Compartmented Information Facilities (SCIFs) and other secured, classified environments for the defense and national security community. We work with the agencies, contractors, and mission-driven organizations that keep the nation safe, delivering the physical infrastructure that makes classified work possible. We’re growing fast, operating across multiple markets, and building a company that takes both the mission and the business seriously.\nAbout the Role\nAs Cybersecurity Engineer, you own the security posture of Nooks' own unclassified environment - hardening it, assessing it against the National Institute of Standards and Technology (NIST) Special Publication (SP) 800-171 and the Cybersecurity Maturity Model Certification (CMMC), and keeping the evidence that proves it. Our classified infrastructure gets the headlines, but protecting Controlled Unclassified Information (CUI) is equally critical to the mission and to partner trust. This is a hands-on, individual-contributor role reporting to the Cyber Compliance and Policy Manager in IT/Cyber: you run the compliance program and do the technical work behind it, assessing, hardening, and certifying the estate the IT team builds and operates. Your focus is Nooks' own environment, including the customer facing unclassified network deployed at all Nooks facilities.\nOwnership is defined, but the program is still being built: controls need tuning, evidence needs automating, and priorities shift as new tools and vendors enter the environment. This is a \"player-coach\" role - you set the cadence, run the deep-dive self-assessments and internal audits yourself, and step in wherever the unclassified environment's security needs you, translating NIST controls into practical configurations rather than waiting for perfect requirements.\nKey Responsibilities\nNIST 800-171 Compliance & Governance\nOwn the unclassified environment's compliance posture and maintain the System Security Plan (SSP) against NIST SP 800-171 and CMMC Level 2.\nTrack findings and vulnerabilities and manage Plans of Action & Milestones (POA&Ms) to drive timely remediation.\nGenerate and maintain SPRS scores, identifying gaps ahead of third-party assessment.\nStrictly adhere to Change Management processes and the Change Control Board (CCB), ensuring all infrastructure modifications are thoroughly validated and tested prior to production deployment.\nSelf-Assessment & Audit Readiness\nIndependently plan and execute comprehensive self-assessments of the unclassified network, acting as internal auditor to validate control effectiveness.\nLead preparation for C3PAO assessments - compile evidence, interview technical staff, and keep the environment audit-ready at all times.\nDocument controls clearly for external auditors and translate requirements for non-technical leadership.\nCloud & Hybrid Infrastructure Security\nSecure and monitor both Google Workspace and Microsoft environments (Active Directory, Group Policy), ensuring proper Separation of Duties (SoD) and secure remote access configurations. \nEnsure Data Loss Prevention (DLP), access controls, and mobile device management (MDM) meet CUI protection requirements.\nContinuously monitor for configuration drift against the CUI baseline.\nVendor & Software Assurance\nServe as the primary cybersecurity point of contact for evaluating new enterprise software introductions.\nAssess compliance requirements so new tools meet network-specific security standards and organizational policy.\nEvaluate the compliance posture of third-party tools, software and vendors to preserve the chain of trust.\nWhat Success Looks Like in This Role\nWithin the first year, Nooks' unclassified environment has a current, accurate SSP and a defensible SPRS score, with gaps identified and driven to closure through POA&Ms before any third-party assessment. Self-assessments run on a regular cadence, and the Google Workspace environment is configured and monitored so DLP, access controls, and MDM demonstrably protect CUI. The environment is audit-ready at all times, and when a C3PAO assessment comes, evidence and artifacts are organized and complete. New software and vendors are vetted for compliance before they enter the environment, preserving the chain of trust. Leadership relies on this role as the authoritative source of truth for the unclassified compliance posture.\nCross-Functional Expectations\nThis role partners closely and collaboratively with Enterprise IT to secure and monitor the Google Workspace and Microsoft environments and with IT/Cyber Operations to remediate findings across the unclassified estate. It serves as the cybersecurity point of contact for teams across Nooks introducing new software, and provides evidence and technical answers to external C3PAO assessors during audits. It executes on the compliance program owned by the Cyber Compliance and Policy Manager and reports posture and risk up through Enterprise Cyber.\nThe Skillset\nRequired\nU.S. citizenship (a compliance requirement for accessing CUI/ITAR data).\n5-8 years in cybersecurity, with at least 3 years focused specifically on NIST SP 800-171 compliance and implementation.\nDemonstrated experience configuring and securing Google Workspace in a regulated environment, including compliance controls across Drive, Gmail, and endpoint management.\nProven ability to conduct technical self-assessments - comfortable acting as an auditor, testing controls, and gathering evidence without supervision.\nDeep understanding of DFARS 252.204-7012/7019/7020, NIST SP 800-171, and CMMC Level 2 assessment guides.\nActive DoD 8570/8140 IAM Level II or III certification (e.g., CISSP, CISM, CASP+, or CAP).\nStrong ability to explain technical requirements to non-technical leadership and document controls clearly for external auditors.\nPreferred\nCMMC Certified Professional (CCP) or Registered Practitioner (RP).\nGoogle Professional Cloud Security Engineer or Professional Google Workspace Administrator certification.\nActive Secret or Top Secret clearance (a plus; this role focuses on the unclassified environment).\nExperience functioning as a formal security control assessor (SCA) or QSA.\nFamiliarity with detection and incident-response tooling - endpoint detection and response (EDR) and security information and event management (SIEM).\nCompensation & Benefits\nBase salary\nPerformance bonus\nEquity\nBenefits: Medical, dental, vision, PTO, and 401(k).\nEligibility & Clearance\nCandidates must be U.S. citizens (a compliance requirement for accessing CUI/ITAR data) and authorized to work in the United States. This role supports the unclassified environment; an active security clearance is not required, though a Secret or Top Secret clearance is a plus.\nSalary Range for all departments\nSalary Range\n$145,000—$163,000 USD","description_format":"text","description_chars":6918,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":true,"languages":[]},"benefits":["Equity"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","National Security"],"lifecycle":[{"event":"open","at":"2026-10-20T20:02:50Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":3,"expected_fill_days":35,"reasons":["conf:3","win:early"],"computed_at":"2026-10-24T06:02:35Z"},"pay":{"stated_usd_annual":163000,"is_top_pay":false},"html_url":"https://alion.io/job/nooks-cybersecurity-engineer","json_url":"https://alion.io/job/nooks-cybersecurity-engineer.json","meta":{"generated_at":"2026-10-24T11:29:04Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":16339,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-25T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3797787},"rest":"https://alion.io/mcp/rest/get_company?id=3797787"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnooks-cybersecurity-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnooks-cybersecurity-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnooks-cybersecurity-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/nooks-cybersecurity-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnooks-cybersecurity-engineer"}]}