Cybersecurity Compliance & Operations Specialist - Aerospace Industry

Cybersecurity Compliance & Operations Specialist - Aerospace Industry

Reports to: IT Manager •
Location: Kent, WA •
Type: Exempt, Full-Time •
Schedule: Full-time onsite Monday – Friday •
Salary Range: $115,000 – $150,000 (based on experience, certifications, and technical depth).

Full benefits package includes: Medical, Dental, Vision, 401(k) matching, Performance Share incentive compensation, 3-weeks paid time off to start, paid community service day, tuition reimbursement, parental leave, short term disability, long term disability, life insurance, long-term care plan options, 10 paid holidays, and onsite health services including access to a massage therapist.

The Cybersecurity Compliance & Operations Specialist helps build, operate, and continuously improve the organization’s internal security program. This hands‑on role supports multiple security domains—security operations, identity and access management, endpoint and network defense, vulnerability management, vendor risk, compliance, incident readiness, and employee security enablement. The position works closely with IT, facility leadership, corporate IT leaders, third‑party security partners such as Cyderes, and business teams to reduce cyber risk and protect information systems, operational technology, networks, endpoints, and data.

The role supports CMMC readiness and applicable regulatory or contractual requirements and is ideal for someone with broad IT and security experience who wants to grow into a senior internal security role over time.

• Opportunity to strengthen cybersecurity practices in a hands‑on facility environment
• Collaboration with IT and business leaders on security and resiliency initiatives
• Exposure to a broad range of infrastructure, endpoint, cloud, identity, and operational technology security needs
• Continuing education benefits up to $5,250 annually toward coursework, certifications, and professional development related to the role
• Ability to make a visible impact by improving security awareness, incident readiness, and risk reduction across the facility

• Strong technical judgment, sound risk awareness, and a practical approach to balancing security with business operations
• Proactive, detail‑oriented, and comfortable investigating alerts, identifying root causes, and driving issues to resolution
• Excellent communication skills with technical teams, facility stakeholders, corporate IT leaders, and security partners
• Deep understanding of CMMC compliance and ability to translate requirements into actionable policies, procedures, and controls
• Ability to explain security risks in business terms to technical and non‑technical audiences
• Comfortable working in a fast‑paced facility environment where priorities may shift based on operational needs or emerging threats

• Support day‑to‑day security operations: SIEM and EDR alert triage, log review, incident investigation support, documentation, and coordination of corrective actions.
• Serve as the facility focal point for SOC coordination by validating alerts, gathering local context, coordinating containment and remediation, tracking response actions, and communicating status through closure.
• Help administer identity and access management systems, including SSO, MFA, directory services, onboarding, transfers, offboarding, periodic access reviews, and cleanup of stale accounts.
• Maintain and improve endpoint security across the fleet: EDR health, patch management, configuration baselines, disk encryption, and security tool coverage.
• Assist with network security tasks such as firewall rule reviews, VPN administration, segmentation support, misconfiguration monitoring, and coordination with IT or facility stakeholders.
• Support vulnerability management by coordinating scanning, prioritizing findings, working with system owners on remediation, and tracking metrics and risk trends.
• Contribute to compliance readiness: implement controls, collect evidence, maintain policies, complete customer security questionnaires, support audits, and track gaps, risks, and remediation activities.
• Support vendor risk management by reviewing third‑party…