Senior Baseline Security Engineer

This is a fully remote position, open to applicants in District of Columbia, +1 more state.

📋 Description

• Develop, implement, and sustain enterprise security baselines in accordance with CIS Benchmarks, DISA STIGs, and NIST guidelines.

• Create and uphold security baselines utilizing CIS Benchmarks and DISA STIGs.

• Review, formulate, and tailor security configuration standards for enterprise technologies.

• Assist with vulnerability management and remediation efforts.

• Conduct research and analysis of security vulnerabilities leveraging NVD and CVE resources.

• Establish baseline configurations based on vendor documentation and security guidance.

• Convert technical requirements into FISMA, NIST, and client-specific compliance mandates.

• Aid in assessment, authorization, and continuous monitoring processes.

• Collaborate closely with engineering, operations, and cybersecurity teams to enforce secure configurations.

• Generate technical documentation, security standards, and configuration guidance.

• Support audit preparedness and compliance reporting initiatives.

⛳️ Requirements

• Over 5 years of experience in supporting Information Technology operations.

• Proven experience in creating security baselines using CIS and STIG benchmarks.

• Demonstrated experience in reviewing, developing, or customizing general security configuration baselines.

• Familiarity with NIST Special Publication guidance, including 800-30, 800-37, 800-53, 800-60, 800-63, 800-115, and 800-137.

• Knowledge of the National Vulnerability Database (NVD) and Common Vulnerabilities and Exposures (CVE).

• Capability to create security baselines from scratch using vendor documentation.

• Proficiency in adapting CIS and STIG benchmarks to fulfill organizational requirements.

• Ability to interpret low-level security requirements into high-level FISMA, NIST, and client-specific needs.

• Capacity to obtain and retain a Public Trust or Suitability/Fitness determination.

• High School Diploma or GED.

• Experience with Cisco, Juniper, Palo Alto, Windows Server, Red Hat, Linux, AWS, Azure, Salesforce, Okta, Microsoft 365, or ServiceNow.

• Familiarity with designing and implementing automation tools such as Ansible, Chef, or Puppet.

• Experience with Infrastructure-as-Code technologies, including Terraform or CloudFormation.

• Knowledge of OpenShift and containerized environments.

• Experience with chaos engineering and blue/green deployments.

• Familiarity with serverless technologies like Lambda, API Gateway, Step Functions, and SAM.

• Experience with application performance monitoring and analysis platforms, including ELK.

• Proficiency in JSON or YAML programming.

• Bachelor's Degree (preferred).

• AWS Certified Solutions Architect, AWS Certified Developer, CCNA, MCSE, RHCSA, EBSA, ECSS, or similar certifications (preferred).

🏝️ Benefits

• Competitive salary based on candidate qualifications.

• Incentive plans featuring corporate and individual performance bonuses.

• 401K plan.

• Paid Time Off (PTO).

• Flexible remote work options.

• Health and wellness programs.

• Employee discounts.

• Reimbursement for learning and development.

• Opportunities for professional development.

• 401(k) matching.