Senior Baseline Security Engineer, CIS, STIGs
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior security engineer building and validating CIS/STIG baselines for phia’s federal cybersecurity clients. Mapping configurations to NIST, FISMA, and agency security controls.
Responsibilities:
- Create security configuration baselines using CIS Benchmarks and DISA STIGs
- Modify CIS and STIG benchmarks to meet organizational requirements
- Work with system teams to negotiate and document deviations and justifications
- Develop new baselines from vendor documentation where no benchmark exists
- Translate low-level baseline settings into FISMA, NIST 800-53, and client-specific security requirements
- Apply NVD and CVE information to keep baselines current with emerging vulnerabilities
- Run Tenable compliance scans to assess systems against existing baselines
- Reconcile scan findings with system owners and keep baseline and scan results aligned
- Build baselines for servers, network devices, cloud and SaaS services, and mobile technologies
- Own assigned baselines independently and communicate status, deviations, and risks
- Review and customize general security configuration baselines and support rollout across the environment
- Learn new technologies from vendor documentation
Requirements:
- 5+ years of experience providing support to Information Technology (IT) operations
- Experience creating security baselines using CIS and STIG benchmarks
- Experience reviewing, developing, or customizing general security configuration baselines
- Knowledge of NIST 800 Special Publication series guidance, including 800-30, 800-37, 800-53, 800-60, 800-63, 800-115, or 800-137
- Knowledge of the National Vulnerability Database (NVD) and Common Vulnerabilities and Exposures (CVE)
- Ability to create security baselines from scratch using vendor documentation
- Ability to modify CIS and STIG benchmarks to meet organizational requirements
- Ability to translate low-level security baseline requirements into high-level FISMA, NIST, and client-specific security requirements
- Experience verifying baselines with Tenable compliance scans, including custom audit files (preferred)
- Experience with networking, operating systems, cloud services, or mobile technologies (preferred)
- Experience with automation tools including Ansible, Chef, or Puppet (preferred)
- Experience with Infrastructure-as-Code tools including CloudFormation or Terraform (preferred)
- Experience with container platforms including OpenShift (preferred)
- Experience with chaos engineering and blue/green deployments (preferred)
- Experience with serverless technologies including AWS Lambda, API Gateway, Step Functions, and SAM (preferred)
- Experience with JSON or YAML and scripting in bash, PowerShell, or Python (preferred)
- AWS Certified Solutions Architect, AWS Certified Developer, CCNA, MCSE, RHCSA, CompTIA, ISACA, or ISC2 certification (preferred or a plus)
- High school diploma or GED required
- Public Trust / Suitability clearance; applicants selected will be subject to a security investigation
- Must be a U.S. Citizen
- Ability to work core hours approximately 7:30 AM–4:30 PM US Eastern Time, Monday through Friday, with an 8:30 AM ET daily team meeting
Benefits:
- Medical Insurance
- Dental Insurance
- Vision Insurance
- Life Insurance
- Short Term & Long Term Disability
- 401k Retirement Savings Plan with Company Match
- Paid Holidays
- Paid Time Off (PTO)
- Tuition and Professional Development Assistance
- Flexible schedule with advance notice
- Minimal travel
Similar Jobs
Chartered or Principal Enterprise Advisor – Security Architecture
Security architecture advisor assuring cloud, hybrid and on-premises environments for Intelance, a UK cybersecurity and advisory firm. Delivering threat models, design reviews and client-ready assurance reports.
Senior Security Architect
Senior Security Architect advancing First Hawaiian Bank’s enterprise security architecture. Securing hybrid cloud, on-premises, and AI/ML technologies while supporting regulatory compliance.
Staff Security Engineer – Enterprise Security
Staff Security Engineer securing ServiceNow’s AI-powered enterprise SaaS platform across cloud, on-premises, and isolated infrastructure. Supporting Protected B workloads and Canadian government compliance.
Director of Security, Risk
Director leading security governance, compliance, and risk programs at SentiLink, which verifies identities and flags fraud. Owning FedRAMP, SOC 2, PCI DSS, and third-party risk.
Vulnerability Management Engineer, Security Assessment – Qualys VMDR
Vulnerability engineer operating Qualys VMDR, security assessments, and remediation tracking. Supporting Gruve’s enterprise cybersecurity and cloud infrastructure services through global 24x7 operations.
Senior Cloud Security Engineer
Senior Cloud Security Engineer owning AWS security for Erbis’s enterprise supply-chain and shipment platform. Leading detection, incident response, identity, compliance, and AI-assisted security operations.
Information Security Consultant
Information Security Consultant delivering GRC engagements, risk assessments and vCISO advisory. Helping Cognisys clients strengthen security programmes and achieve compliance certifications.
Senior Cybersecurity IAM Engineer
Senior IAM Engineer managing identity, access, authentication, and entitlement systems for Louisiana Blue, a health insurer. Designing secure IAM architecture, integrations, and controls.
Product Security Engineer
Product Security Engineer securing Superhuman’s AI productivity platform, products, and AI agents. Building secure-by-default tooling, guardrails, and product security practices.
IT Lead – Security
IT and cybersecurity lead owning systems, support, hardware, and security for Frontline’s remote wildfire-defense technology company. Building IT operations and SOC 2 readiness as its first dedicated IT professional.
Senior Director, Product Security
Senior Director leading application, privacy, device, and research security at 1Password. Building secure access solutions for over 180,000 businesses.
Security Engineer II
Analista de Governança de TI apoiando controles, auditorias e riscos tecnológicos na Stone. Contribuição para a melhoria contínua dos processos de tecnologia da fintech brasileira de pagamentos.
Senior AWS DevOps/Security Engineer – Architect
Senior AWS DevOps/Security Engineer designing, securing, and operating Tieto’s AWS platforms. Automating infrastructure, CI/CD, monitoring, and production operations for modernization and migration programs.
Senior Security Engineer, Product Security
Senior Security Engineer securing Komodo Health’s healthcare data platform, software supply chain, and AI features. Automating product-security testing and remediation across US-based engineering teams.
Senior Digital Security Specialist – Offensive and Defensive Security
Especialista sênior em segurança digital na Evertec, empresa de tecnologia financeira. Executando testes de intrusão e orientando remediações em aplicações, infraestrutura e nuvem.
Senior Instructor, Training – Cloud Security
Cloud security instructor delivering hands-on CNAPP and Falcon Cloud Security training. Developing courses, certification exams, and labs for CrowdStrike customers.
Cloud Azure Security Engineer
Cloud Azure Security Engineer securing Microsoft Azure environments for Monks, a global AI-powered transformation consultancy. Managing Entra ID, compliance controls, vulnerabilities, and cloud security automation.
Staff Product Security Engineer
Staff Product Security Engineer embedding with ServiceTitan engineering portfolios to secure SaaS applications, cloud infrastructure, and AI-enabled features. Driving threat modeling, remediation, paved-road adoption, and portfolio risk reduction.
Senior Information Security Coordinator
Coordenador sênior de segurança da informação no Bernoulli Educação, grupo educacional brasileiro. Gestão de riscos, LGPD, incidentes, vulnerabilidades e equipes.
Incident Response Product Security Engineer II
Incident response engineer securing Esri’s ArcGIS geographic-information software. Investigating vulnerabilities, facilitating red-team exercises, and advancing product security practices.