Назад
Company hidden
6 дней назад

Baseline Security Engineer (Cybersecurity)

135 000 - 150 000$
Формат работы
remote (только USA)
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Baseline Security Engineer (Cybersecurity): Implementing and maintaining cybersecurity controls and security baselines for critical client systems with an accent on CIS and STIG benchmarks, NIST guidance, compliance, and risk management. Focus on creating baselines from vendor documentation, translating technical requirements into FISMA and NIST controls, and mitigating vulnerabilities across evolving cyber threats.

Location: Remote

Salary: USD 135,000–150,000 per year

Company

hirify.global supports national security and critical civilian missions through cybersecurity, advanced technology integration, and mission-focused services.

What you will do

  • Implement and maintain cybersecurity controls and security configuration baselines.
  • Conduct security, compliance, and risk assessments and help systems meet established security requirements.
  • Create, review, and customize baselines using CIS and STIG benchmarks, including developing baselines from vendor documentation.
  • Identify and mitigate vulnerabilities while collaborating with technical teams on remediation.
  • Support audits and security reviews, maintain documentation, and protect client systems from evolving cyber threats.

Requirements

  • Bachelor’s degree and 5+ years of experience supporting IT operations.
  • Experience creating security baselines using CIS and STIG benchmarks and reviewing, developing, or customizing general security configuration baselines.
  • Knowledge of the NIST 800 Special Publication series for risk management and security control implementation, including 800-30, 800-37, 800-53, 800-60, 800-63, 800-115, or 800-137.
  • Knowledge of the National Vulnerability Database and Common Vulnerability Enumeration.
  • Ability to create security baselines from scratch using vendor documentation and modify CIS and STIG benchmarks to meet organizational requirements.
  • Ability to translate low-level security baseline requirements into high-level FISMA and NIST requirements and client-specific security requirements.
  • Ability to obtain and maintain a Public Trust or Suitability/Fitness determination based on client requirements.

Nice to have

  • Experience with networking technologies such as Cisco, Juniper, or Palo Alto; operating systems such as Windows Server, Red Hat, or Linux; cloud services such as AWS, Azure, Salesforce, Okta, O365, or ServiceNow; or mobile technologies such as iOS or Xen Mobile.
  • Experience designing, building, and implementing automation tools such as Ansible, Chef, or Puppet.
  • Experience with Infrastructure-as-Code tools such as CloudFormation or Terraform and container platforms such as OpenShift.
  • Experience with chaos engineering, blue or green deployments, serverless services, application performance analysis, and monitoring with ELK.
  • Experience with JSON or YAML programming.
  • AWS Certified Solutions Architect, AWS Certified Developer, CCNA, MSCE, RHCSA, EBSA, or ECSS certification.

Culture & Benefits

  • Regular employment with health, life, disability, retirement, paid time off, holiday pay, and optional benefits, dependent upon position.
  • Learning and development opportunities are available.
  • Culture emphasizes happiness, support, integrity, humility, eagerness, collaboration, and a strong work ethic.

Будьте осторожны

Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →