Remote Senior InfoSec Engineer – Baselines & Compliance

Raventek Solution Partners LLC; Washington (District of Columbia); Remoto; USD 83.000 - 131.000; Tempo pieno

Descrizione del lavoro

RavenTek is seeking a Senior Information Security Engineer to develop, implement, and maintain security baselines and configurations across IT systems. You will evaluate configurations, identify vulnerabilities, and apply NIST/FISMA guidance to ensure compliant, secure environments.

Remote work option with strict adherence to security policies. The role requires collaboration with technical teams and stakeholders to deliver secure IT solutions, maintain documentation, and support ongoing

Competenze

• Minimum 5 years of IT security experience.
• Experience creating security baselines with CIS and STIG benchmarks.
• Knowledge of NIST 800-series risk management and controls.
• Ability to obtain/maintain Public Trust.
• Strong written and verbal communication.

Mansioni

• Develop, review, and maintain security baselines using vendor docs, CIS benchmarks, and STIGs.
• Customize CIS and STIG benchmarks to meeting organizational and customer requirements.
• Review configurations to identify vulnerabilities and compliance gaps.
• Research vulnerabilities using NVD/CVE.
• Translate requirements into FISMA/NIST and customer-specific controls.
• Apply NIST 800-series guidance to risk management and security controls.
• Maintain technical documentation related to baselines and controls.
• Provide recommendations to improve configurations and reduce vulnerabilities.
• Collaborate with teams to support baselines and compliance.
• Enter time worked daily and submit reports as required.
• Monitor and respond to RavenTek communications; complete required training.
• Other duties as assigned.

Conoscenze

NVD/CVE

Security baselines

CIS benchmarks

STIGs

FISMA/NIST alignment

Documentation

Formazione

High school diploma or GED required

Bachelor's degree preferred

Strumenti

Ansible

Terraform

CloudFormation

OpenShift

AWS

Azure

ELK

Descrizione del lavoro

RavenTek is seeking a Senior Information Security Engineer to develop, implement, and maintain security baselines and configurations across IT systems. You will evaluate configurations, identify vulnerabilities, and apply NIST/FISMA guidance to ensure compliant, secure environments.

Remote work option with strict adherence to security policies. The role requires collaboration with technical teams and stakeholders to deliver secure IT solutions, maintain documentation, and support ongoing