Senior Information Security Engineer

This is a fully remote position, open to applicants in District of Columbia, +1 more state.

📋 Description

• Develop, review, and uphold security configuration baselines utilizing vendor documentation, CIS benchmarks, and STIGs.

• Tailor existing CIS and STIG benchmarks to align with organizational and customer-specific security needs.

• Evaluate and analyze security configurations to uncover vulnerabilities, security deficiencies, and compliance gaps.

• Investigate and assess vulnerabilities through the National Vulnerability Database (NVD) and Common Vulnerabilities and Exposures (CVE).

• Convert technical security baseline requirements into FISMA, NIST, and client-specific security standards.

• Implement NIST 800-series guidance to facilitate risk management, security control execution, and ongoing security compliance.

• Create and sustain technical documentation for security configuration baselines, standards, and security controls.

• Offer technical advice to mitigate security vulnerabilities and enhance system configurations.

• Collaborate with technical teams and stakeholders to enforce security baselines and compliance standards.

• Log actual working hours daily and submit timesheets at the conclusion of each pay period.

• Provide status reports as necessary.

• Check RavenTek email at least three times per week and respond appropriately.

• Complete assigned compliance training.

• Perform additional tasks as assigned.

⛳️ Requirements

• High school diploma or GED is mandatory.

• Bachelor's degree is preferred.

• A minimum of 5 years of experience in supporting Information Technology (IT) operations.

• Experience in creating security baselines using CIS and STIG benchmarks.

• Familiarity with NIST 800 Special Publication series guidance for risk management and security control implementation, including 800-30, 800-37, 800-53, 800-60, 800-63, 800-115, or 800-137.

• Proficiency in reviewing, developing, or customizing general security configuration baselines.

• Knowledge of the National Vulnerability Database (NVD) and Common Vulnerability Enumeration (CVE).

• Capability to create security baselines from scratch utilizing vendor documentation.

• Ability to adjust CIS and STIG benchmarks to fulfill organizational requirements.

• Skill in translating low-level security baseline requirements into high-level FISMA and NIST mandates and client-specific security guidelines.

• Practical understanding of information security principles, concepts, and methodologies.

• Ability to meet deadlines while efficiently planning, prioritizing, and executing assigned information and industrial security-related tasks.

• Strong analytical, proactive, adaptable, detail-oriented, and organizational skills.

• Exceptional written and verbal communication, presentation, and teamwork abilities.

• Capability to obtain and maintain a Public Trust and/or Suitability/Fitness determination based on client specifications.

• Preferred experience with networking technologies, operating systems, cloud services and platforms, or mobile technologies.

• Preferred experience in designing, building, and implementing automation tools using Ansible, Chef, or Puppet.

• Preferred experience with Infrastructure as Code tools, including CloudFormation or Terraform.

• Preferred experience with container platforms, such as OpenShift.

• Preferred experience with chaos engineering and blue-green deployments.

• Preferred experience with serverless technologies, including AWS Lambda, API Gateway, Step Functions, and SAM.

• Preferred experience with application performance analysis and monitoring tools, including ELK.

• Preferred experience with JSON or YAML.

• AWS Certified Solutions Architect is preferred.

• AWS Certified Developer is preferred.

• Cisco Certified Network Associate (CCNA) is preferred.

• Microsoft Certified Systems Engineer (MCSE) is preferred.

• Red Hat Certified System Administrator (RHCSA) is preferred.

• EBSA or ECSS Certification is preferred.

• Ability to sit at a workstation and work on a desktop or laptop for extended durations.

• Proficient in effectively communicating both verbally and in writing.

• Capability to lift and/or move moderate weights, typically up to 20 pounds.

• Regular and predictable attendance is crucial.

🏝️ Benefits

• Fully remote home office environment.

• Reasonable accommodations under the Americans with Disabilities Act.

• Equal access/equal opportunity/affirmative action employer.