Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
развернуть
$135к-150к/год
$140к$160кмедиана$210к
По похожим ролям (50) ~ $160к/год
На СНГ рынке: $5.1к/мес ($3.7к - $6.7к)
82
Хорошая вакансия
развернуть
У роли четкий фокус на кибербезопасности, конкретные задачи по настройке базовых требований и соответствию стандартам, а также заявлены возможности обучения; удаленная работа доступна только из США и требуется проверка Public Trust.
Только для США
?Проверка Public Trust
Понятные задачи
Обучение за счет компании
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Baseline Security Engineer (Cybersecurity): Implementing and maintaining cybersecurity controls and security baselines for critical client systems with an accent on CIS and STIG benchmarks, NIST guidance, compliance, and risk management. Focus on creating baselines from vendor documentation, translating technical requirements into FISMA and NIST controls, and mitigating vulnerabilities across evolving cyber threats.
Location: Remote
Salary: USD 135,000–150,000 per year
Company
hirify.global supports national security and critical civilian missions through cybersecurity, advanced technology integration, and mission-focused services.
What you will do
Implement and maintain cybersecurity controls and security configuration baselines.
Conduct security, compliance, and risk assessments and help systems meet established security requirements.
Create, review, and customize baselines using CIS and STIG benchmarks, including developing baselines from vendor documentation.
Identify and mitigate vulnerabilities while collaborating with technical teams on remediation.
Support audits and security reviews, maintain documentation, and protect client systems from evolving cyber threats.
Requirements
Bachelor’s degree and 5+ years of experience supporting IT operations.
Experience creating security baselines using CIS and STIG benchmarks and reviewing, developing, or customizing general security configuration baselines.
Knowledge of the NIST 800 Special Publication series for risk management and security control implementation, including 800-30, 800-37, 800-53, 800-60, 800-63, 800-115, or 800-137.
Knowledge of the National Vulnerability Database and Common Vulnerability Enumeration.
Ability to create security baselines from scratch using vendor documentation and modify CIS and STIG benchmarks to meet organizational requirements.
Ability to translate low-level security baseline requirements into high-level FISMA and NIST requirements and client-specific security requirements.
Ability to obtain and maintain a Public Trust or Suitability/Fitness determination based on client requirements.
Nice to have
Experience with networking technologies such as Cisco, Juniper, or Palo Alto; operating systems such as Windows Server, Red Hat, or Linux; cloud services such as AWS, Azure, Salesforce, Okta, O365, or ServiceNow; or mobile technologies such as iOS or Xen Mobile.
Experience designing, building, and implementing automation tools such as Ansible, Chef, or Puppet.
Experience with Infrastructure-as-Code tools such as CloudFormation or Terraform and container platforms such as OpenShift.
Experience with chaos engineering, blue or green deployments, serverless services, application performance analysis, and monitoring with ELK.
Regular employment with health, life, disability, retirement, paid time off, holiday pay, and optional benefits, dependent upon position.
Learning and development opportunities are available.
Culture emphasizes happiness, support, integrity, humility, eagerness, collaboration, and a strong work ethic.
Будьте осторожны
Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →