Senior Security Baselines Engineer - Remote

RavenTek; Washington (District of Columbia); A distancia; USD 120.000 - 180.000; Jornada completa

Descripción de la vacante

RavenTek is seeking a Senior Information Security Engineer to develop and maintain security baselines, assess configurations, and address vulnerabilities following NIST and federal guidelines. The role collaborates with IT teams to deliver secure, compliant solutions across cloud and on-prem environments.

Ideal candidates will have strong experience with CIS/STIG benchmarks, automation tooling, and open-source monitoring stacks, enabling effective security posture management in a remote work

Formación

• High level security baselines experience required.
• Ability to translate security requirements into practical controls.
• Experience with CIS/STIG benchmarks and NIST guidance.

Responsabilidades

• Develop, review, and maintain security configuration baselines using vendor docs, CIS benchmarks, and STIGs.
• Customize CIS/STIG benchmarks to meet customer requirements.
• Review and assess security configurations to identify vulnerabilities and gaps.
• Research vulnerabilities using NVD and CVE.
• Translate baseline requirements into FISMA/NIST requirements.
• Apply NIST 800-series guidance for risk management and controls.
• Develop technical documentation on baselines, standards, and controls.
• Provide technical recommendations to address vulnerabilities and improve configurations.
• Collaborate with teams to implement baselines and compliance.

Conocimientos

NVD/CVE knowledge

Security baselines

FISMA/NIST requirements

Security configurations review

Vulnerability assessment

Automation tooling (Ansible, Chef,-Pup

IaC tools (CloudFormation, Terraform)

Cloud platforms (AWS, Azure)

OpenShift experience

Communication skills

Educación

Bachelor's degree preferred

Relevant certifications (AWS/Azure)

Herramientas

Ansible

Chef

Puppet

CloudFormation

Terraform

OpenShift

ELK Stack

JSON

YAML

Descripción del empleo

RavenTek is seeking a Senior Information Security Engineer to develop and maintain security baselines, assess configurations, and address vulnerabilities following NIST and federal guidelines. The role collaborates with IT teams to deliver secure, compliant solutions across cloud and on-prem environments.

Ideal candidates will have strong experience with CIS/STIG benchmarks, automation tooling, and open-source monitoring stacks, enabling effective security posture management in a remote work