Senior Information Security Engineer

Jobgether; Oregon; Hybrid; USD 106,000 - 113,000; Full time

Benefits offered by this job

Fully remote work

40 hours per week

Federal contracting environment

Home-office

Job summary

Jobgether on behalf of a partner company seeks a Senior Information Security Engineer based in the United States for a fully remote role. You will develop, assess, and maintain security baselines aligned with CIS Benchmarks, STIGs, and NIST guidance to strengthen federal contracting security.

Responsibilities include tailoring baselines, assessing configurations for vulnerabilities, applying NIST 800-series controls, and documenting standards.

Qualifications

• High school diploma or GED; bachelor's preferred.
• 5+ years in IT operations or security roles.
• Experience creating/security baselines with CIS/STIGs and NIST guidance.
• Familiarity with NVD/CVE and federal security controls.

Responsibilities

• Develop, review, and maintain security baselines using CIS/STIGs.
• Customize benchmarks for organizational needs and customer requirements.
• Identify vulnerabilities and compliance gaps in system configurations.
• Translate findings into FISMA/NIST and customer controls.
• Apply NIST 800-series guidance to risk management activities.
• Create documentation for baselines, standards, and controls.
• Recommend remediation and collaborate with technical teams.
• Meet compliance requirements and report status regularly.

Skills

Analytical thinking

Communication

Prioritization

Security baseline development

vuln assessment

Education

Bachelor’s degree (preferred)

Tools

Ansible

Chef

Puppet

CloudFormation

Terraform

Job description

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Information Security Engineer based in the United States.

This is an opportunity for an experienced information security professional to strengthen the security and compliance posture of critical IT systems in a fully remote environment. You will develop, assess, and maintain security configuration baselines aligned with industry standards and federal requirements. Working with frameworks such as CIS Benchmarks, STIGs, and NIST guidance, you will identify vulnerabilities and translate technical findings into practical security improvements. You will collaborate with technical teams and stakeholders to implement reliable, compliant configurations and support ongoing risk management activities. This role is well suited to an analytical, detail-oriented engineer who enjoys solving complex security challenges and contributing to mission-critical technology environments.

Accountabilities

• Develop, review, and maintain security configuration baselines using vendor documentation, CIS Benchmarks, and Security Technical Implementation Guides (STIGs).
• Customize existing CIS and STIG benchmarks to address organizational and customer-specific security requirements.
• Assess current system configurations to identify vulnerabilities, security weaknesses, and compliance gaps.
• Research and analyze vulnerabilities using the National Vulnerability Database (NVD) and Common Vulnerabilities and Exposures (CVE).
• Translate technical security baseline requirements into applicable FISMA, NIST, and customer-specific security controls.
• Apply NIST Special Publication 800-series guidance to support risk management, security control implementation, and ongoing compliance activities.
• Create and maintain technical documentation covering security configuration baselines, standards, and security controls.
• Provide technical recommendations to remediate identified vulnerabilities and strengthen system configurations.
• Collaborate with technical teams and stakeholders to implement security baselines and meet compliance requirements.
• Complete administrative and operational responsibilities, including accurate daily time reporting, timely timesheet submission, and regular status reporting.
• Monitor and respond to work-related communications, complete required compliance training, and support additional duties as assigned.

Requirements

• High school diploma or GED required; a bachelor's degree is preferred.
• At least 5 years of experience supporting IT operations.
• Demonstrated experience creating security baselines using CIS Benchmarks and STIGs.
• Experience reviewing, developing, or customizing general security configuration baselines.
• Working knowledge of the National Vulnerability Database (NVD) and Common Vulnerabilities and Exposures (CVE).
• Experience applying NIST 800-series guidance for risk management and security control implementation, including publications such as NIST SP 800-30, 800-37, 800-53, 800-60, 800-63, 800-115, and 800-137.
• Ability to create security baselines from vendor documentation and adapt benchmarks to organizational needs.
• Ability to translate detailed technical security requirements into broader FISMA, NIST, and customer-specific compliance requirements.
• Practical understanding of information security principles, concepts, and methodologies, with the ability to apply them to defined technical challenges.
• Familiarity with networking technologies such as Cisco, Juniper, and Palo Alto; operating systems such as Windows Server and Red Hat Linux; and cloud or enterprise platforms such as AWS, Azure, Salesforce, Okta, Office 365, and ServiceNow.
• Experience with mobile technologies such as iOS or XenMobile is an advantage.
• Knowledge of automation and configuration management tools such as Ansible, Chef, or Puppet is preferred.
• Familiarity with Infrastructure as Code tools, including CloudFormation and Terraform, is desirable.
• Experience with container platforms such as OpenShift is a plus.
• Exposure to chaos engineering, blue-green deployments, and serverless technologies such as AWS Lambda, API Gateway, Step Functions, and SAM is beneficial.
• Familiarity with application performance analysis and monitoring tools, including ELK, as well as JSON and YAML.
• Strong analytical, organizational, and prioritization skills, with attention to detail and the ability to meet deadlines.
• Excellent written and verbal communication, presentation, and teamwork skills.
• Ability to obtain and maintain a Public Trust and/or Suitability/Fitness determination in accordance with customer requirements.
• Relevant certifications are preferred, including AWS Certified Solutions Architect, AWS Certified Developer, Cisco CCNA, Microsoft MCSE, Red Hat RHCSA, EBSA, or ECSS.

Benefits

• Hourly compensation ranging from $76.92 to $81.74 .
• Fully remote work arrangement.
• Full-time schedule of 40 hours per week, Monday through Friday.
• Opportunity to work on information security standards and compliance initiatives in a federal contracting environment.
• Home-office-based working environment.