Senior Baseline Security Engineer (CIS & STIGs) - Remote

Phia LLC; Fairfax (VA); Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

Life Insurance

Short/Long Disability

401k with company match

Paid Holidays

Paid Time Off

Tuition and Professional Development

Job summary

phia LLC is seeking a Senior Baseline Security Engineer to design and maintain secure configuration baselines for a federal financial regulator. You will own baselines end-to-end, from CIS/DISA with vendor docs to Tenable verification and mapping to NIST 800-53 and FISMA, adapting benchmarks to client needs and emerging tech.

You will work remotely within the U.S., collaborating with federal leads, and progressively handling new platforms while ensuring risk is communicated to system owners and

Qualifications

• 5+ years of IT operations support.
• Experience creating security baselines with CIS and STIG benchmarks.
• Knowledge of NIST 800-series guidance for risk management and security controls.
• Knowledge of NVD and CVE.
• Ability to build baselines from vendor documentation.
• Ability to modify CIS and STIG benchmarks to meet org requirements.
• Ability to translate low-level baseline requirements into high-level security requirements.

Responsibilities

• Build baselines using CIS Benchmarks and DISA STIGs.
• Tailor benchmarks to client requirements with system teams; document deviations.
• Write new baselines from vendor documentation for unbenchmarked tech.
• Map settings to FISMA, NIST 800-53, and client security requirements.
• Use vulnerability data (NVD/CVE) to keep baselines current.
• Verify baselines with Tenable scans and reconcile findings.
• Learn new platforms and build baselines across servers, networks, cloud, SaaS, and mobile.
• Communicate status, deviations, and risk clearly to owners.

Skills

CIS Benchmarks

DISA STIGs

NIST 800-53 mapping

Tenable/Nessus

Scripting (bash/PowerShell/Python)

Education

High school diploma or GED

Bachelor's degree preferred

Tools

Tenable (Nessus)

Ansible

Chef

Puppet

CloudFormation

Terraform

OpenShift

Job description

phia LLC is seeking a Senior Baseline Security Engineer to design and maintain secure configuration baselines for a federal financial regulator. You will own baselines end-to-end, from CIS/DISA with vendor docs to Tenable verification and mapping to NIST 800-53 and FISMA, adapting benchmarks to client needs and emerging tech.

You will work remotely within the U.S., collaborating with federal leads, and progressively handling new platforms while ensuring risk is communicated to system owners and