Remote Senior CIS/STIG Baseline Security Engineer

phia, LLC; United States; Remote; USD 125,000 - 175,000; Full time

Benefits offered by this job

Medical Insurance

Vision Insurance

Life Insurance

Short Term Disability

Long Term Disability

401k Retirement Savings Plan with 401k

Paid Holidays

Paid Time Off (PTO)

Tuition and Professional Development

Job summary

phia LLC is seeking a Senior Baseline Security Engineer (CIS & STIGs) to build and maintain secure baselines for a federal financial regulatory agency. Fully remote within the U.S., the role focuses on CIS benchmarks, DISA STIGs, and NIST mappings, with Tenable verification and vulnerability awareness.

You’ll own baselines end to end, tailoring benchmarks with system teams, and translating low-level settings into client security requirements, while learning new platforms and communicating risk

Qualifications

• 5+ years supporting IT operations and security baselines.
• Experience creating baselines using CIS and STIG benchmarks.
• Ability to translate baselines to FISMA/NIST requirements.
• Familiarity with NVD/CVE data and vulnerability scoring.
• Ability to write quick checks in bash/PowerShell/Python.

Responsibilities

• Create security configuration baselines using CIS Benchmarks and DISA STIGs.
• Tailor benchmarks to client requirements and document deviations.
• Develop new baselines from vendor docs where needed.
• Translate settings into NIST 800-53 and client security requirements.
• Verify baselines with Tenable and align with CVE data.
• Learn new platforms and own assigned baselines end-to-end.
• Communicate status and risk clearly to system owners.

Skills

IT Operations

CIS & STIG Hands-On

Baseline Author

NIST-Fluent

Vulnerability-Aware

Scripting Proficiency

Tenable-Capable

Autonomous Communicator

Education

High school diploma or GED required; Bachelor’s Degree preferred

Tools

Tenable

JSON/YAML

Job description

phia LLC is seeking a Senior Baseline Security Engineer (CIS & STIGs) to build and maintain secure baselines for a federal financial regulatory agency. Fully remote within the U.S., the role focuses on CIS benchmarks, DISA STIGs, and NIST mappings, with Tenable verification and vulnerability awareness.

You’ll own baselines end to end, tailoring benchmarks with system teams, and translating low-level settings into client security requirements, while learning new platforms and communicating risk