Baseline Security Configurations Engineer

RK Management Consultants, Inc.; Chicago (IL); Hybrid; USD 110,000 - 160,000; Full time

Job summary

RK Management Consultants, Inc. in Chicago offers a hybrid role with three days onsite.

You will design, implement, and maintain security controls across enterprise infrastructure, endpoints, cloud, SaaS, and applications, collaborating with engineering teams to embed security in new projects and provide guidance during design and implementation. The ideal candidate has 5+ years in security engineering or related fields, strong Windows/Linux hardening, vulnerability management, and experience

Qualifications

• 5+ years of experience in security engineering or related fields.
• Strong Windows/Linux security, system hardening, vulnerability management, and controls.
• Experience with security tools such as Tenable, Qualys, SCCM/Intune or similar.
• Relevant certifications preferred (Security+, CISSP, CySA+, GIAC, AWS or Azure Security).

Responsibilities

• Design, implement, and maintain security controls across enterprise infrastructure, endpoints, cloud, SaaS, and applications.
• Develop, maintain, and improve secure baseline configurations; assess compliance and remediate gaps.
• Review cloud services and configurations against security standards across AWS, Azure, and SaaS platforms.
• Administer and improve security tools; automate assessments, remediation, and reporting.
• Partner with security, infrastructure, application, and technology teams to identify and reduce security risks; support audits and regulatory requirements.
• Develop security standards, procedures, configuration guidelines, and compliance reports; communicate risks to stakeholders.

Skills

Security engineering

Cloud security

Vulnerability management

Compliance

Documentation

Communication

Tools

PowerShell

Python

Bash

Ansible

Job description

Hybrid role in Chicago with 3 days onsite. Must be local or in neighboring state and must be available for in person interview

• Security Engineering: Design, implement, and maintain security controls across enterprise infrastructure, endpoints, cloud, SaaS, and application environments. Work with engineering and technology teams to incorporate security requirements into new projects and provide security guidance during design and implementation.
• Baseline Security Configurations: Develop, maintain, and improve secure baseline configurations for enterprise technologies. Work with technology owners to assess compliance, identify configuration gaps, recommend remediation, manage exceptions, and validate that security controls are properly implemented. Experience with CIS Benchmarks, DISA STIGs, NIST, and other security hardening standards is important.
• Cloud & SaaS Security: Support security and governance initiatives across AWS, Azure, and SaaS platforms. Review cloud services and configurations against security standards, participate in security assessments, and help secure new cloud and SaaS technologies.
• Security Tools & Automation: Administer and improve security and configuration management tools, monitor security control effectiveness, and look for opportunities to automate assessments, remediation, and reporting. Experience with PowerShell, Python, Bash, Ansible, or similar scripting technologies is preferred.
• Risk & Compliance: Partner with security, infrastructure, application, and technology teams to identify and reduce security risks. Support vulnerability management, audits, risk assessments, regulatory requirements, and security compliance activities.
• Documentation & Communication: Develop security standards, procedures, configuration guidelines, exception documentation, and compliance reports. Ability to communicate security requirements and technical risks clearly to both technical and business stakeholders.
• Required Background: 5+ years of experience in security engineering, cybersecurity, systems administration, configuration management, or security architecture, with strong knowledge of Windows/Linux security, system hardening, vulnerability management, and security controls. Experience with tools such as Tenable, Qualys, SCCM/Intune, or similar platforms is a plus. Relevant certifications such as Security+, CISSP, CySA+, GIAC, AWS Security, or Azure Security are preferred.