Cybersecurity Compliance & Operations Specialist - Aerospace Industry

Cybersecurity Compliance & Operations Specialist

Reports to: IT Manager

Location: Kent, WA

Type: Exempt, Full-Time

Schedule: Monday - Friday, 100% Onsite

Salary Range for position: $115,000 - $150,000; placement within this range will be based upon previous experience, certifications, technical depth, CMMC and NIST SP 800-171 experience, SOC coordination experience, and facility cybersecurity experience

Full benefits package includes: Medical, Dental, Vision, 401(k) matching, Performance Share incentive compensation (Profit Sharing Plan), 3-weeks paid time off to start, paid community service day, tuition reimbursement, parental leave, short term disability, long term disability, life insurance, long-term care plan options, 10 paid holidays, and onsite health services that includes access to a massage therapist.

The Cybersecurity Compliance & Operations Specialist helps build, operate, and continuously improve the organization's internal security program. This hands‑on role supports multiple security domains, including security operations, identity and access management, endpoint and network defense, vulnerability management, vendor risk, compliance, incident readiness, and employee security enablement. The position works closely with IT, facility leadership, corporate IT leaders, third‑party security partners such as Cyderes, and business teams to reduce cyber risk, protect information systems, operational technology, networks, endpoints, and data, and support reliable business and production operations.

The role supports CMMC readiness and applicable regulatory or contractual requirements, including protection of Federal Contract Information and Controlled Unclassified Information where applicable, and is ideal for someone with broad IT and security experience who wants to grow into a senior internal security role over time.

• Opportunity to strengthen cybersecurity practices in a hands‑on facility environment
• Collaboration with IT and business leaders on security and resiliency initiatives
• Exposure to a broad range of infrastructure, endpoint, cloud, identity, and operational technology security needs
• Continuing education benefits up to $5,250 annually toward coursework, certifications, and professional development related to the role
• Ability to make a visible impact by improving security awareness, incident readiness, and risk reduction across the facility

• Has strong technical judgment, sound risk awareness, and a practical approach to balancing security with business operations
• Is proactive, detail‑oriented, and comfortable investigating alerts, identifying root causes, and following issues through to resolution
• Can communicate effectively with technical teams, facility stakeholders, corporate IT leaders, and security partners to provide context, align priorities, and drive response or remediation actions to completion
• Understands CMMC compliance and can help translate compliance requirements into practical policies, procedures, technical controls, evidence collection, and day‑to‑day operating practices
• Communicates clearly with technical and non‑technical audiences and can explain security risks in business terms
• Is comfortable working in a fast‑paced facility environment where priorities may shift based on operational needs or emerging threats

• Support day‑to‑day security operations, including SIEM and EDR alert triage, log review, incident investigation support, documentation of findings, and coordination of corrective actions.
• Serve as the facility focal point for SOC coordination by validating alerts, gathering local system or user context, coordinating containment and remediation, tracking response actions, and communicating status through closure.
• Help administer identity and access management systems, including SSO, MFA, directory services, onboarding, transfers, offboarding, periodic access reviews, and cleanup of stale accounts or excessive entitlements.
• Maintain and improve endpoint security across the fleet, including EDR health, patch management, configuration baselines, disk encryption, and security tool coverage.
• Assist with…