A.    Purpose and Scope

Avcorp operates in a U.S. Department of Defense (DoD) environment and handles Controlled Unclassified Information (CUI). To support compliance with CMMC 2.0 Level 2, we are strengthening our operational cybersecurity capabilities.

The Security Operations Administrator plays a hands-on role, ensuring that cybersecurity controls are effectively operated, and that systems handling sensitive data remain secure and compliant.

B.    Responsibilities

1. CMMC Operational Support

• Support day-to-day execution of CMMC Level 2 controls


• Maintain compliance documentation (SSP, POA&M, evidence)


• Help track remediation actions and improvements


• Ensure systems handling CUI follow defined security standards

2. Cybersecurity Operations

• Operate and monitor key security tools:


• 
  
  
  
  • Endpoint protection (EDR)
  
  
  • Log monitoring / SIEM
  
  
  • Identity & access controls
  
  
  
  


• Investigate alerts and escalate when needed


• Support system hardening and secure configurations


• Work with IT teams to resolve security issues

3. Incident & Vulnerability Handling

• Participate actively in incident detection, analysis, and response


• Coordinate security incidents involving CUI


• Ensure incidents are documented, reported, and investigated per policy


• Operate the vulnerability management:
  
  
  
  • Identification
  
  
  • Tracking
  
  
  • Remediation, follow-up and closure
  
  
  
  

4. Documentation & Audit Readiness

• Keep documentation updated and aligned with reality


• Collect audit evidence (logs, screenshots, configs)


• Support internal and external audits

6. Collaboration

• Work closely with IT, infrastructure, and Group security teams


• Support secure implementation of new systems and changes


• Contribute to raising security awareness

C.    JOB REQUIREMENTS

Education

• Degree in Cybersecurity, IT, or equivalent

Experience

• 2 to 4 years in IT or cybersecurity (SOC, sysadmin, security ops)


• First exposure to CMMC, NIST 800-171, or similar frameworks is a plus