Senior Baseline Security Engineer, CIS, STIGs

This is a fully remote position, open to applicants in United States.

📋 Description

• Develop security configuration baselines utilizing CIS Benchmarks and DISA STIGs.

• Adjust CIS and STIG benchmarks to align with organizational needs.

• Collaborate with system teams to negotiate and document deviations and justifications.

• Create new baselines from vendor documentation when no benchmark is available.

• Convert low-level baseline settings into FISMA, NIST 800-53, and specific client security requirements.

• Utilize NVD and CVE information to ensure baselines remain updated with emerging vulnerabilities.

• Perform Tenable compliance scans to evaluate systems against established baselines.

• Reconcile scan results with system owners and ensure alignment between baseline and scan outcomes.

• Establish baselines for servers, network devices, cloud and SaaS services, as well as mobile technologies.

• Independently manage assigned baselines while communicating status, deviations, and risks.

• Review and tailor general security configuration baselines, supporting their deployment across the environment.

• Acquire knowledge of new technologies through vendor documentation.

⛳️ Requirements

• 5+ years of experience in supporting Information Technology (IT) operations.

• Proven experience in creating security baselines utilizing CIS and STIG benchmarks.

• Experience in reviewing, developing, or customizing general security configuration baselines.

• Familiarity with NIST 800 Special Publication series guidelines, including 800-30, 800-37, 800-53, 800-60, 800-63, 800-115, or 800-137.

• Understanding of the National Vulnerability Database (NVD) and Common Vulnerabilities and Exposures (CVE).

• Capability to create security baselines from scratch using vendor documentation.

• Proficiency in modifying CIS and STIG benchmarks to satisfy organizational requirements.

• Ability to translate low-level security baseline requirements into high-level FISMA, NIST, and client-specific security standards.

• Experience in verifying baselines using Tenable compliance scans, including custom audit files (preferred).

• Background in networking, operating systems, cloud services, or mobile technologies (preferred).

• Familiarity with automation tools such as Ansible, Chef, or Puppet (preferred).

• Experience with Infrastructure-as-Code tools like CloudFormation or Terraform (preferred).

• Knowledge of container platforms, including OpenShift (preferred).

• Experience in chaos engineering and blue/green deployments (preferred).

• Familiarity with serverless technologies, including AWS Lambda, API Gateway, Step Functions, and SAM (preferred).

• Proficient in JSON or YAML and scripting with bash, PowerShell, or Python (preferred).

• Possession of AWS Certified Solutions Architect, AWS Certified Developer, CCNA, MCSE, RHCSA, CompTIA, ISACA, or ISC2 certification (preferred or an advantage).

• High school diploma or GED is required.

• Public Trust / Suitability clearance; selected applicants will be subjected to a security investigation.

• Must be a U.S. Citizen.

• Ability to work core hours approximately 7:30 AM–4:30 PM US Eastern Time, Monday through Friday, with an 8:30 AM ET daily team meeting.

🏝️ Benefits

• Medical Insurance

• Dental Insurance

• Vision Insurance

• Life Insurance

• Short Term & Long Term Disability

• 401k Retirement Savings Plan with Company Match

• Paid Holidays

• Paid Time Off (PTO)

• Tuition and Professional Development Assistance

• Flexible schedule with advance notice

• Minimal travel