Senior Baseline Security Engineer (CIS/DISA/NIST)

MBL Technologies, Inc.; Washington (District of Columbia); On-site; USD 140,000 - 180,000; Full time

Job summary

MBL Technologies, Inc. is seeking an experienced Baseline Security Engineer, Senior to support cybersecurity engineering, vulnerability management, and compliance initiatives for a federal government customer.

The role focuses on developing, implementing, and maintaining enterprise security baselines using CIS Benchmarks, DISA STIGs, and NIST guidance. The ideal candidate will translate security requirements into actionable controls to strengthen enterprise security posture and support ongoing

Qualifications

• Experience developing secure configuration standards and baselines.
• Ability to translate security requirements into actionable controls.
• Experience with NIST, CIS, DISA STIGs and compliance initiatives.

Responsibilities

• Create and maintain security baselines utilizing CIS Benchmarks and DISA STIGs.
• Review and customize security configuration standards for enterprise technologies.
• Support vulnerability management and remediation initiatives.
• Research and analyze vulnerabilities using NVD and CVE resources.
• Develop baseline configurations from vendor docs and guidance.
• Translate technical requirements into FISMA, NIST, and client compliance requirements.
• Support assessment, authorization, and continuous monitoring activities.
• Collaborate with engineering, operations, and cybersecurity teams to implement secure configurations.

Skills

Security baselines

CIS Benchmarks

DISA STIGs

NIST guidance

Vulnerability management

Secure configurations

Compliance

Job description

MBL Technologies, Inc. is seeking an experienced Baseline Security Engineer, Senior to support cybersecurity engineering, vulnerability management, and compliance initiatives for a federal government customer.

The role focuses on developing, implementing, and maintaining enterprise security baselines using CIS Benchmarks, DISA STIGs, and NIST guidance. The ideal candidate will translate security requirements into actionable controls to strengthen enterprise security posture and support ongoing