Senior Information Security Engineer
Core
Develop, assess, and maintain security configuration baselines aligned with industry standards and federal requirements to strengthen the security and compliance posture of critical IT systems.
Role type
Senior Information Security Engineer (Compliance & Configuration)
Builds
Security configuration baselines, compliance controls, and risk management frameworks
Domain
Information Security / Federal Compliance / IT Operations
Required skills
CIS Benchmarks, STIGs, NIST 800-series, NVD, CVE, FISMA, security configuration management, vulnerability assessment, technical documentation, risk management
Preferred skills
AWS, Azure, Cisco, Juniper, Palo Alto, Windows Server, Red Hat Linux, Ansible, Chef, Puppet, Terraform, CloudFormation, OpenShift, chaos engineering, ELK stack
Technologies
CIS Benchmarks, STIGs, NIST SP 800-series, NVD, CVE, FISMA, AWS, Azure, Cisco, Juniper, Palo Alto, Windows Server, Red Hat Linux, Ansible, Chef, Puppet, Terraform, CloudFormation, OpenShift, ELK
Responsibilities
Develop, review, and maintain security configuration baselines using vendor documentation, CIS Benchmarks, and STIGs; Assess current system configurations to identify vulnerabilities, security weaknesses, and compliance gaps; Translate technical security baseline requirements into applicable FISMA, NIST, and customer-specific security controls; Create and maintain technical documentation covering security configuration baselines, standards, and security controls; Provide technical recommendations to remediate identified vulnerabilities and strengthen system configurations; Collaborate with technical teams and stakeholders to implement security baselines and meet compliance requirements.
Seniority
Senior, hands-on IC
