<p>Vulcan Elements is manufacturing American rare-earth permanent magnets for a secure, resilient future. With a focus on national security and economic resiliency, we serve critical industries such as defense, aerospace, and automotive powering a high-technology future. Vulcan Elements is building a team of ambitious professionals committed to Mission Focus, Technical Excellence and Integrity.</p> <p>As an IT Cybersecurity Engineer, you will be a hands-on member of our security team, responsible for deploying, tuning, and operating the tools and controls that protect Vulcan Elements’ IT environment. You will also support our NIST SP 800-53 (Low-Impact Baseline) assessment and Plan of Action and Milestones (POA&M, working alongside our external compliance partner and our existing NIST SP 800-171/CMMC program. This role is a strong fit for someone who wants to build and run real security tooling day to day while also gaining exposure to federal compliance frameworks in a regulated manufacturing environment.</p> <p><strong>Responsibilities</strong></p> <ul> <li>Deploy, configure, and operate core security tooling including SIEM, endpoint detection and response (EDR), vulnerability scanning, and email/web security controls.</li> <li>Administer and harden identity systems (Active Directory/Entra ID), and enforce MFA, least-privilege access, just-in-time access, and Conditional Access policies across IT systems.</li> <li>Run regular vulnerability scans, prioritize findings, and drive remediation with system owners; track exceptions and compensating controls.</li> <li>Monitor security alerts, investigate and triage incidents, and lead or support incident response and root cause analysis for IT systems.</li> <li>Support the assessment of IT controls against the NIST SP 800-53 Low-Impact Baseline, help build and maintain the System Security Plan (SSP), and contribute to the Plan of Action and Milestones (POA&M).</li> <li>Coordinate with our external CMMC compliance partner to keep IT security controls consistent across NIST SP 800-171 (CMMC Level 2) and NIST SP 800-53, avoiding duplicate or conflicting work.</li> <li>Own patch management and secure configuration baselines for servers, endpoints, and network devices.</li> <li>Provide security review and input on new IT systems, applications, and vendor tools before they go into production.</li> <li>Maintain security procedures, playbooks, network/data flow diagrams, and audit evidence.</li> <li>Support delivery of security awareness training to personnel with access to CUI or other sensitive systems.</li> <li>Partner with Automation, Engineering, and OT teams to build security into new production lines and control system upgrades from the start.</li> </ul> <p><em>Responsibilities and tasks outlined are not exhaustive and may change as determined by the needs of the business.</em></p> <p><strong>Qualifications</strong></p> <ul> <li>3+ years of hands-on IT security engineering experience (security operations, security engineering, or systems administration with a strong security focus).</li> <li>Strong knowledge of Azure Active Directory/Entra ID and Windows/endpoint security hardening.</li> <li>Working knowledge of NIST SP 800-53 and/or NIST SP 800-171/CMMC; experience contributing to a System Security Plan (SSP) or POA&M is a strong plus.</li> </ul> <p><em>Must be a U.S. Person due to required access to U.S. export-controlled information or facilities.</em></p> <p><strong>Desired Skills</strong></p> <ul> <li>Working knowledge of ISA/IEC 62443, NIST SP 800-82, and NIST SP 800-53; experience contributing to an SSP or POA&M for OT systems is a strong plus.</li> <li>Prior experience in a defense contractor, federal contractor, or CHIPS/DoD-funded environment.</li> <li>CompTIA Security+, GSEC, CySA+, or similar; CCP (Certified CMMC Professional) a plus.</li> </ul> <p> </p>