Remote Senior Information Security Engineer: Baselines & Compliance

Raventek Solution Partners LLC; Oregon; Hybrid; USD 120,000 - 180,000; Full time

Job summary

Raventek Solution Partners LLC is seeking a Senior Information Security Engineer to join our Operations – Services team, remote-friendly. You will develop, implement, and maintain security baselines and configurations to meet NIST and federal guidelines.

You will collaborate with technical teams to identify vulnerabilities, create baselines from vendor docs, and translate requirements into actionable security controls.

Qualifications

• Minimum of 5 years of experience supporting Information Technology (IT) operations.
• Experience creating security baselines using CIS and STIG benchmarks.
• Experience working with the NIST 800 Special Publication series guidance for risk management and security control implementation, including 800-30,800-37,800-53,800-60,800-63,800-115, or 800-137.
• Experience reviewing, developing, or customizing general security configuration baselines.
• Experience with networking technologies (Cisco, Juniper, Palo Alto); operating systems (Windows Server, Red Hat Linux); cloud services and platforms (AWS, Azure, Salesforce, Okta, Office 365, ServiceNow); or mobile technologies (iOS, XenMobile) is preferred.
• Experience designing, building, and implementing automation tools using Ansible, Chef, or Puppet is preferred.
• Experience with Infrastructure as Code (IaC) tools, including CloudFormation or Terraform, is preferred.
• Experience with container platforms, including OpenShift, is preferred.
• Experience with chaos engineering and blue-green deployments is preferred.
• Experience with serverless technologies, including AWS Lambda, API Gateway, Step Functions, and SAM, is preferred.
• Experience with application performance analysis and monitoring tools, including ELK, is preferred.
• Experience with JSON or YAML is preferred.

Responsibilities

• Develop, review, and maintain security configuration baselines using vendor documentation, CIS benchmarks, and STIGs.
• Customize existing CIS and STIG benchmarks to meet organizational and customer-specific security requirements.
• Review and assess existing security configurations to identify vulnerabilities, security weaknesses, and compliance gaps.
• Research and analyze identified vulnerabilities using the National Vulnerability Database (NVD) and Common Vulnerabilities and Exposures (CVE).
• Translate technical security baseline requirements into applicable FISMA, NIST, and customer-specific security requirements.
• Apply NIST 800-series guidance to support risk management, security control implementation, and ongoing security compliance activities.
• Develop and maintain technical documentation related to security configuration baselines, standards, and security controls.
• Provide technical recommendations to address identified security vulnerabilities and improve system configurations.
• Collaborate with technical teams and stakeholders to support the implementation of security baselines and compliance requirements.

Job description

Raventek Solution Partners LLC is seeking a Senior Information Security Engineer to join our Operations – Services team, remote-friendly. You will develop, implement, and maintain security baselines and configurations to meet NIST and federal guidelines.

You will collaborate with technical teams to identify vulnerabilities, create baselines from vendor docs, and translate requirements into actionable security controls.