Senior Security Engineer

Job Summary

To support a federal financial regulatory agency, the full-time Senior Baseline Security Engineer will build and maintain secure configuration baselines using CIS Benchmarks and DISA STIGs, tailoring controls to meet organizational requirements while working remotely.

Key responsibilities

• Create security configuration baselines from CIS Benchmarks and DISA STIGs
• Modify benchmarks to align with client-specific organizational requirements
• Translate low-level baseline settings into high-level FISMA and NIST security requirements

Required qualifications

• 5+ years of experience in IT operations support
• Experience creating and customizing security baselines using CIS and STIG benchmarks
• Knowledge of NIST 800 series guidance for risk management and security controls
• Familiarity with the National Vulnerability Database (NVD) and Common Vulnerabilities and Exposures (CVE)
• Ability to develop security baselines from vendor documentation