Senior Baseline Security Engineer, CIS, STIGs

🔥 17 hours ago

🇺🇸 United States – Remote

💵 $125k - $175k / year

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

phia, LLC

WebsiteLinkedInAll Job Openings

11 - 50 employees

Founded 2011

💼 Consulting

🎖️ Defense

📦 Logistics

Consulting • Defense • Logistics

<phia, LLC> is a cybersecurity firm that provides cyber assessments, cybersecurity operations, security engineering and development, and advisory services to help clients defend against advanced threats. The company leverages threat intelligence, operations-informed techniques, and industry standards to build resilient solutions and support mission success for its clients and partners.

📋 Description

• Create security configuration baselines using CIS Benchmarks and DISA STIGs • Modify CIS and STIG benchmarks to meet organizational requirements • Work with system teams to negotiate and document deviations and justifications • Develop new baselines from vendor documentation where no benchmark exists • Translate low-level baseline settings into FISMA, NIST 800-53, and client-specific security requirements • Apply NVD and CVE information to keep baselines current with emerging vulnerabilities • Run Tenable compliance scans to assess systems against existing baselines • Reconcile scan findings with system owners and keep baseline and scan results aligned • Build baselines for servers, network devices, cloud and SaaS services, and mobile technologies • Own assigned baselines independently and communicate status, deviations, and risks • Review and customize general security configuration baselines and support rollout across the environment • Learn new technologies from vendor documentation

🎯 Requirements

• 5+ years of experience providing support to Information Technology (IT) operations • Experience creating security baselines using CIS and STIG benchmarks • Experience reviewing, developing, or customizing general security configuration baselines • Knowledge of NIST 800 Special Publication series guidance, including 800-30, 800-37, 800-53, 800-60, 800-63, 800-115, or 800-137 • Knowledge of the National Vulnerability Database (NVD) and Common Vulnerabilities and Exposures (CVE) • Ability to create security baselines from scratch using vendor documentation • Ability to modify CIS and STIG benchmarks to meet organizational requirements • Ability to translate low-level security baseline requirements into high-level FISMA, NIST, and client-specific security requirements • Experience verifying baselines with Tenable compliance scans, including custom audit files (preferred) • Experience with networking, operating systems, cloud services, or mobile technologies (preferred) • Experience with automation tools including Ansible, Chef, or Puppet (preferred) • Experience with Infrastructure-as-Code tools including CloudFormation or Terraform (preferred) • Experience with container platforms including OpenShift (preferred) • Experience with chaos engineering and blue/green deployments (preferred) • Experience with serverless technologies including AWS Lambda, API Gateway, Step Functions, and SAM (preferred) • Experience with JSON or YAML and scripting in bash, PowerShell, or Python (preferred) • AWS Certified Solutions Architect, AWS Certified Developer, CCNA, MCSE, RHCSA, CompTIA, ISACA, or ISC2 certification (preferred or a plus) • High school diploma or GED required • Public Trust / Suitability clearance; applicants selected will be subject to a security investigation • Must be a U.S. Citizen • Ability to work core hours approximately 7:30 AM–4:30 PM US Eastern Time, Monday through Friday, with an 8:30 AM ET daily team meeting

🏖️ Benefits

• Medical Insurance • Dental Insurance • Vision Insurance • Life Insurance • Short Term & Long Term Disability • 401k Retirement Savings Plan with Company Match • Paid Holidays • Paid Time Off (PTO) • Tuition and Professional Development Assistance • Flexible schedule with advance notice • Minimal travel

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume