Senior InfoSec Engineer — Remote, Baselines & Compliance

Jobgether; Oregon; Hybrid; USD 106,000 - 113,000; Full time

Benefits offered by this job

Fully remote work

40 hours per week

Federal contracting environment

Home-office

Job summary

Jobgether on behalf of a partner company seeks a Senior Information Security Engineer based in the United States for a fully remote role. You will develop, assess, and maintain security baselines aligned with CIS Benchmarks, STIGs, and NIST guidance to strengthen federal contracting security.

Responsibilities include tailoring baselines, assessing configurations for vulnerabilities, applying NIST 800-series controls, and documenting standards.

Qualifications

• High school diploma or GED; bachelor's preferred.
• 5+ years in IT operations or security roles.
• Experience creating/security baselines with CIS/STIGs and NIST guidance.
• Familiarity with NVD/CVE and federal security controls.

Responsibilities

• Develop, review, and maintain security baselines using CIS/STIGs.
• Customize benchmarks for organizational needs and customer requirements.
• Identify vulnerabilities and compliance gaps in system configurations.
• Translate findings into FISMA/NIST and customer controls.
• Apply NIST 800-series guidance to risk management activities.
• Create documentation for baselines, standards, and controls.
• Recommend remediation and collaborate with technical teams.
• Meet compliance requirements and report status regularly.

Skills

Analytical thinking

Communication

Prioritization

Security baseline development

vuln assessment

Education

Bachelor’s degree (preferred)

Tools

Ansible

Chef

Puppet

CloudFormation

Terraform

Job description

Jobgether on behalf of a partner company seeks a Senior Information Security Engineer based in the United States for a fully remote role. You will develop, assess, and maintain security baselines aligned with CIS Benchmarks, STIGs, and NIST guidance to strengthen federal contracting security.

Responsibilities include tailoring baselines, assessing configurations for vulnerabilities, applying NIST 800-series controls, and documenting standards.