United States
Remote only
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Information Security Engineer based in the United States.
This is an opportunity for an experienced information security professional to strengthen the security and compliance posture of critical IT systems in a fully remote environment. You will develop, assess, and maintain security configuration baselines aligned with industry standards and federal requirements. Working with frameworks such as CIS Benchmarks, STIGs, and NIST guidance, you will identify vulnerabilities and translate technical findings into practical security improvements. You will collaborate with technical teams and stakeholders to implement reliable, compliant configurations and support ongoing risk management activities. This role is well suited to an analytical, detail-oriented engineer who enjoys solving complex security challenges and contributing to mission-critical technology environments.
Develop, review, and maintain security configuration baselines using vendor documentation, CIS Benchmarks, and Security Technical Implementation Guides (STIGs).
Customize existing CIS and STIG benchmarks to address organizational and customer-specific security requirements.
Assess current system configurations to identify vulnerabilities, security weaknesses, and compliance gaps.
Research and analyze vulnerabilities using the National Vulnerability Database (NVD) and Common Vulnerabilities and Exposures (CVE).
Translate technical security baseline requirements into applicable FISMA, NIST, and customer-specific security controls.
Apply NIST Special Publication 800-series guidance to support risk management, security control implementation, and ongoing compliance activities.
Create and maintain technical documentation covering security configuration baselines, standards, and security controls.
Provide technical recommendations to remediate identified vulnerabilities and strengthen system configurations.
Collaborate with technical teams and stakeholders to implement security baselines and meet compliance requirements.
Complete administrative and operational responsibilities, including accurate daily time reporting, timely timesheet submission, and regular status reporting.
Monitor and respond to work-related communications, complete required compliance training, and support additional duties as assigned.
High school diploma or GED required; a bachelor's degree is preferred.
At least 5 years of experience supporting IT operations.
Demonstrated experience creating security baselines using CIS Benchmarks and STIGs.
Experience reviewing, developing, or customizing general security configuration baselines.
Working knowledge of the National Vulnerability Database (NVD) and Common Vulnerabilities and Exposures (CVE).
Experience applying NIST 800-series guidance for risk management and security control implementation, including publications such as NIST SP 800-30, 800-37, 800-53, 800-60, 800-63, 800-115, and 800-137.
Ability to create security baselines from vendor documentation and adapt benchmarks to organizational needs.
Ability to translate detailed technical security requirements into broader FISMA, NIST, and customer-specific compliance requirements.
Practical understanding of information security principles, concepts, and methodologies, with the ability to apply them to defined technical challenges.
Familiarity with networking technologies such as Cisco, Juniper, and Palo Alto; operating systems such as Windows Server and Red Hat Linux; and cloud or enterprise platforms such as AWS, Azure, Salesforce, Okta, Office 365, and ServiceNow.
Experience with mobile technologies such as iOS or XenMobile is an advantage.
Knowledge of automation and configuration management tools such as Ansible, Chef, or Puppet is preferred.
Familiarity with Infrastructure as Code tools, including CloudFormation and Terraform, is desirable.
Experience with container platforms such as OpenShift is a plus.
Exposure to chaos engineering, blue-green deployments, and serverless technologies such as AWS Lambda, API Gateway, Step Functions, and SAM is beneficial.
Familiarity with application performance analysis and monitoring tools, including ELK, as well as JSON and YAML.
Strong analytical, organizational, and prioritization skills, with attention to detail and the ability to meet deadlines.
Excellent written and verbal communication, presentation, and teamwork skills.
Ability to obtain and maintain a Public Trust and/or Suitability/Fitness determination in accordance with customer requirements.
Relevant certifications are preferred, including AWS Certified Solutions Architect, AWS Certified Developer, Cisco CCNA, Microsoft MCSE, Red Hat RHCSA, EBSA, or ECSS.
Hourly compensation ranging from $76.92 to $81.74.
Fully remote work arrangement.
Full-time schedule of 40 hours per week, Monday through Friday.
Opportunity to work on information security standards and compliance initiatives in a federal contracting environment.
Home-office-based working environment.
