Senior Information Security Engineer

Jobgether; United States; Remote; USD 106,000 - 113,000; Full time

Benefits offered by this job

Fully remote work arrangement.

Job summary

Jobgether in the United States seeks a Senior Information Security Engineer to strengthen security baselines for critical IT systems in a fully remote environment. You will develop, assess, and maintain baselines aligned with CIS Benchmarks, STIGs, and NIST, translating findings into practical security improvements.

Collaborate with technical teams, implement compliant configurations, and support risk management.

Qualifications

• High school diploma or GED; bachelor’s degree preferred.
• 5+ years of IT operations experience.
• Experience creating security baselines with CIS Benchmarks and STIGs.
• Experience reviewing or customizing security baselines.
• Knowledge of NVD and CVE.
• Experience applying NIST 800-series guidance (SP 800-30, 800-37, 800-53, 800-60, 800-63, 800-115, 800-137).
• Ability to translate requirements into FISMA/NIST/compliance.
• Familiarity with networking (Cisco, Juniper, Palo Alto) and OS (Windows Server, Red Hat Linux) and cloud/enterprise platforms (AWS, Azure, Salesforce, Okta, Office 365, ServiceNow).
• Experience with mobile tech like iOS or XenMobile is an advantage.
• Knowledge of automation/config mgmt (Ansible, Chef, Puppet).
• Infra as Code tools (CloudFormation, Terraform).
• OpenShift experience is a plus.
• Exposure to chaos engineering, blue-green deployments, and serverless (AWS Lambda, API Gateway, Step Functions, SAM).
• Familiarity with ELK and JSON/YAML.
• Strong communication and teamwork, deadlines.
• Ability to obtain Public Trust/Suitability.
• Relevant certifications preferred (AWS/SAA, AWS Developer, Cisco CCNA, Microsoft MCSE, Red Hat RHCSA, EBSA, ECSS).

Responsibilities

• Develop, review, and maintain security configuration baselines using CIS Benchmarks and STIGs.
• Customize CIS/STIG benchmarks for organizational and customer needs.
• Assess configurations to identify vulnerabilities and gaps.
• Research vulnerabilities using NVD and CVE.
• Translate baseline requirements into FISMA, NIST, and customer controls.
• Apply NIST 800-series guidance to risk management and compliance.
• Create and maintain technical documentation on baselines, standards, controls.
• Provide recommendations to remediate vulnerabilities and strengthen configurations.
• Collaborate with teams to implement baselines and meet compliance.
• Complete admin tasks: time reporting, timesheets, status reporting.
• Monitor communications, complete compliance training, support other duties.

Skills

Analytical thinking

Attention to detail

Technical communication

Teamwork

Prioritization

Problem solving

Time management

Education

Bachelor's degree in IT or related field

Tools

AWS

Azure

Salesforce

Okta

Office 365

ServiceNow

Ansible

Chef

Puppet

CloudFormation

Terraform

OpenShift

ELK

JSON

YAML

Windows Server

Red Hat Linux

Cisco

Juniper

Palo Alto

Job description

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Information Security Engineer based in the United States.

This is an opportunity for an experienced information security professional to strengthen the security and compliance posture of critical IT systems in a fully remote environment. You will develop, assess, and maintain security configuration baselines aligned with industry standards and federal requirements. Working with frameworks such as CIS Benchmarks, STIGs, and NIST guidance, you will identify vulnerabilities and translate technical findings into practical security improvements. You will collaborate with technical teams and stakeholders to implement reliable, compliant configurations and support ongoing risk management activities. This role is well suited to an analytical, detail-oriented engineer who enjoys solving complex security challenges and contributing to mission-critical technology environments.

Accountabilities

• Develop, review, and maintain security configuration baselines using vendor documentation, CIS Benchmarks, and Security Technical Implementation Guides (STIGs).
• Customize existing CIS and STIG benchmarks to address organizational and customer-specific security requirements.
• Assess current system configurations to identify vulnerabilities, security weaknesses, and compliance gaps.
• Research and analyze vulnerabilities using the National Vulnerability Database (NVD) and Common Vulnerabilities and Exposures (CVE).
• Translate technical security baseline requirements into applicable FISMA, NIST, and customer-specific security controls.
• Apply NIST Special Publication 800-series guidance to support risk management, security control implementation, and ongoing compliance activities.
• Create and maintain technical documentation covering security configuration baselines, standards, and security controls.
• Provide technical recommendations to remediate identified vulnerabilities and strengthen system configurations.
• Collaborate with technical teams and stakeholders to implement security baselines and meet compliance requirements.
• Complete administrative and operational responsibilities, including accurate daily time reporting, timely timesheet submission, and regular status reporting.
• Monitor and respond to work-related communications, complete required compliance training, and support additional duties as assigned.

Requirements

• High school diploma or GED required; a bachelor's degree is preferred.
• At least 5 years of experience supporting IT operations.
• Demonstrated experience creating security baselines using CIS Benchmarks and STIGs.
• Experience reviewing, developing, or customizing general security configuration baselines.
• Working knowledge of the National Vulnerability Database (NVD) and Common Vulnerabilities and Exposures (CVE).
• Experience applying NIST 800-series guidance for risk management and security control implementation, including publications such as NIST SP 800-30, 800-37, 800-53, 800-60, 800-63, 800-115, and 800-137.
• Ability to create security baselines from vendor documentation and adapt benchmarks to organizational needs.
• Ability to translate detailed technical security requirements into broader FISMA, NIST, and customer-specific compliance requirements.
• Practical understanding of information security principles, concepts, and methodologies, with the ability to apply them to defined technical challenges.
• Familiarity with networking technologies such as Cisco, Juniper, and Palo Alto; operating systems such as Windows Server and Red Hat Linux; and cloud or enterprise platforms such as AWS, Azure, Salesforce, Okta, Office 365, and ServiceNow.
• Experience with mobile technologies such as iOS or XenMobile is an advantage.
• Knowledge of automation and configuration management tools such as Ansible, Chef, or Puppet is preferred.
• Familiarity with Infrastructure as Code tools, including CloudFormation and Terraform, is desirable.
• Experience with container platforms such as OpenShift is a plus.
• Exposure to chaos engineering, blue-green deployments, and serverless technologies such as AWS Lambda, API Gateway, Step Functions, and SAM is beneficial.
• Familiarity with application performance analysis and monitoring tools, including ELK, as well as JSON and YAML.
• Strong analytical, organizational, and prioritization skills, with attention to detail and the ability to meet deadlines.
• Excellent written and verbal communication, presentation, and teamwork skills.
• Ability to obtain and maintain a Public Trust and/or Suitability/Fitness determination in accordance with customer requirements.
• Relevant certifications are preferred, including AWS Certified Solutions Architect, AWS Certified Developer, Cisco CCNA, Microsoft MCSE, Red Hat RHCSA, EBSA, or ECSS.

Benefits

• Hourly compensation ranging from $76.92 to $81.74.
• Fully remote work arrangement.
• Full-time schedule of 40 hours per week, Monday through Friday.
• Opportunity to work on information security standards and compliance initiatives in a federal contracting environment.
• Home-office-based working environment.